Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.cer (raw, json)
Hash identifier: BkMa5dvVOcARNp7kxGV++13HNumYbJ/mj6t8gWQDcfA=
Subject key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 18:26:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.145.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24995 (0x61a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 18:26:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A915D8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:fb:2d:a3:6a:10:39:b8:3d:4b:90:18:92:
73:4d:ac:82:03:3b:d8:cc:37:09:27:12:3b:c1:4a:
41:5b:2d:65:19:aa:57:b0:bf:fa:27:fa:60:ec:9d:
52:1e:f9:ef:2a:4c:e1:ff:55:4c:3f:f7:1b:63:de:
12:42:77:6d:59:26:e1:e7:a9:54:e2:fc:4d:c0:a7:
80:b4:3e:6f:62:b5:82:bb:10:d7:7f:60:e7:29:db:
ba:d7:61:19:89:c2:e5:06:5b:bb:74:3c:1f:6d:2b:
18:d7:42:82:f9:bd:bd:32:da:1f:ce:3a:4d:dc:62:
0f:91:80:53:7f:05:b5:d2:9d:81:29:a7:15:8b:c3:
9e:c0:ba:04:11:2a:13:04:de:ef:85:f4:93:10:34:
e2:51:84:20:a5:8a:92:17:ed:a8:99:7c:c1:4a:b7:
5a:d1:ad:ea:2a:22:8d:09:cb:54:1c:0d:c3:3e:e4:
77:8c:c6:08:ec:2d:e9:c6:ef:01:e7:bd:c6:63:29:
a0:45:21:b6:a1:f9:f0:8f:41:28:17:be:c6:68:cd:
ef:d0:77:b6:23:18:6d:6e:ee:55:40:3e:2f:0c:a7:
81:cb:d3:2e:26:d9:d6:3a:61:19:3a:da:f4:27:af:
54:00:56:1b:aa:ec:af:6d:37:7a:d0:0b:10:23:23:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.145.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1c:2b:54:51:9b:2a:e2:ee:4d:6c:70:a0:6e:a2:c7:48:a8:
64:7b:51:1c:22:d7:b8:05:4f:e9:32:cb:85:f4:08:51:a5:a8:
9b:77:0d:5b:ea:58:e0:9d:b3:79:77:4d:ab:23:5c:5c:db:d8:
3e:f9:59:c7:ff:74:20:76:a7:eb:df:40:50:99:de:5f:b5:88:
34:40:80:5e:e5:06:aa:a3:ba:a5:9c:9c:82:68:13:68:f2:ee:
aa:8d:42:08:54:bd:01:40:8d:5d:08:28:36:7e:81:e9:cf:42:
08:fe:65:e8:b5:e8:ca:23:9c:a8:96:7f:1c:12:24:d9:e8:78:
6b:69:1c:6e:92:e3:38:d4:51:e7:5c:af:75:69:18:f5:7d:ed:
09:e9:b1:9a:47:3d:9f:65:c0:44:96:c0:09:84:40:18:49:76:
4d:52:8d:f6:fa:f3:7d:24:fc:dc:67:39:e0:78:5d:9b:f3:0e:
20:1f:c8:a4:95:df:ef:17:89:20:69:70:e2:7a:ce:8d:33:8e:
b7:f4:85:c2:13:df:fc:88:70:5e:01:8a:c5:ba:60:cf:90:e6:
39:81:f4:e5:e9:1e:9c:ad:6b:dd:86:67:f4:63:d1:6a:a1:0f:
09:98:69:75:af:0f:d7:37:d8:00:a9:89:5d:d0:23:e4:9d:3c:
db:75:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:36 2025 by rpki-client