Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer (raw, json)
Hash identifier: 3CMTn5eVcxHzHvq0hkEJi8bmALIgn4p8UI5mPXOGpy8=
Subject key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Feb 2025 21:33:23 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25046 (0x61d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 4 21:33:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91C779D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:af:f3:65:a5:15:95:ff:89:4a:f7:3d:6c:
64:e4:de:bf:eb:64:b0:64:67:a9:8f:13:24:52:81:
f9:14:b6:49:11:35:a2:6a:da:d1:6d:37:bc:11:20:
fe:bd:24:12:d3:bc:1c:61:41:8a:77:7a:c0:20:12:
a5:04:d6:59:76:0a:f7:64:d4:8e:cd:f5:9b:2a:10:
b0:de:73:a3:f1:eb:53:3d:dd:46:56:b4:b2:69:1d:
24:82:6d:7b:85:34:6a:2a:62:2e:12:11:ab:b3:fc:
bc:e9:19:46:92:88:d0:31:84:e7:f2:70:36:89:a9:
7c:88:80:f6:60:8e:c2:dd:14:38:bc:d0:44:1f:b2:
6a:d2:40:0e:bc:7f:48:26:b5:fd:13:58:0e:cf:3d:
66:14:e8:2c:cc:ef:cc:ee:ed:b6:ed:c7:fc:b3:ac:
57:7e:fe:97:d9:e0:7c:0c:94:36:6c:62:3a:45:b6:
a6:bd:13:c4:89:0e:a6:7b:f0:4d:8d:65:c8:23:56:
de:51:a6:4f:76:36:2e:3f:fb:0b:5c:98:d1:70:66:
17:8b:ba:ba:d9:97:e7:78:f4:1b:34:71:5c:e4:92:
8d:28:97:8c:56:e4:c3:66:a9:15:bf:f6:ae:18:73:
de:8d:b8:34:f0:07:c9:2d:55:ed:3b:e0:c9:3a:d3:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.6.0/23
Signature Algorithm: sha256WithRSAEncryption
90:3c:56:24:e5:d1:f8:26:6a:52:3f:a5:47:a4:65:fd:e6:06:
68:0f:e6:fd:e4:73:73:d3:c4:1b:08:dd:54:02:31:7d:0e:6e:
38:f6:51:0e:3c:1f:a6:c1:01:57:99:11:b5:95:e4:54:03:6f:
26:06:bb:a9:b8:ec:22:2c:e3:83:c0:06:7f:d5:d2:e2:7d:60:
67:09:0e:55:05:83:3c:36:35:dc:c8:f1:71:70:3f:70:89:30:
ed:14:54:55:5a:2a:55:75:55:a7:1b:bb:15:d6:f8:af:a7:5a:
cc:d4:fb:58:34:ac:93:e2:94:36:5c:e4:6d:d8:0a:ef:da:c4:
ac:43:dd:21:ad:ac:d0:ae:7d:32:53:52:23:76:f8:07:ac:0e:
c2:1c:48:fc:0d:92:55:f1:09:b5:72:b2:b5:c3:69:47:9d:97:
0b:9b:a8:94:2b:b0:67:92:75:d2:51:4a:44:0f:a3:1b:7e:41:
1f:83:7e:c2:b8:87:cf:e5:84:e8:bc:5f:11:e0:e3:a0:e5:3b:
23:a7:f2:8d:a0:ad:ec:c3:a0:a2:45:ba:17:ad:f9:f5:c7:54:
aa:27:be:b0:64:40:11:06:ae:0c:17:0c:95:f3:38:a3:22:17:
de:9e:b7:01:6f:28:99:40:91:d2:e4:60:1e:19:4d:f5:c3:11:
11:23:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:54 2025 by rpki-client