Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
File: Nh-touCojPKH9M5sw7RGLJEzC_w.cer (raw, json)
Hash identifier: S7N/YH9W8U2SQSn35QTTEyvcf1UV7cHnjv9fEyUPvo0=
Subject key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jan 2025 04:16:06 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 143.174.192.0/19
IP: 192.150.234.0 -- 192.150.237.255
IP: 192.199.32.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25003 (0x61ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 31 04:16:06 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91F8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:40:70:c8:ef:f7:e6:8d:09:bd:1b:e4:35:
d2:a6:1d:96:cd:3b:1b:ed:d0:c7:bb:9f:ee:21:91:
40:22:50:fe:95:e4:54:bb:5e:53:23:5d:65:cc:67:
e5:6d:74:82:a6:9e:33:2d:88:a0:fd:f5:59:d2:0b:
99:c6:b9:1a:c6:46:47:f5:99:9c:e6:da:40:cc:7f:
6a:f9:79:b8:11:19:08:47:74:b8:95:81:8a:41:77:
9e:a2:e2:9e:b4:ba:c6:c1:d3:77:b2:ef:36:c3:8f:
6e:8f:1f:0f:e0:47:b3:1c:38:9a:2b:ff:f4:ff:14:
a3:4a:67:80:ea:79:b7:7d:c4:0f:c7:81:7a:62:c9:
c5:59:1f:65:23:2f:e9:9a:c7:f9:ce:a7:18:df:f8:
d7:2d:86:22:29:b7:e7:03:79:e7:ea:af:9d:fd:21:
5f:f3:db:67:d6:de:0c:53:63:9a:33:4c:fa:18:5b:
06:ab:53:6c:cd:b3:30:81:21:15:b9:62:6e:a5:99:
b8:a0:44:2c:57:12:de:17:25:d0:ee:0c:21:14:18:
28:3c:46:af:d8:61:d5:95:a8:18:24:08:24:d9:a0:
a5:1d:56:7b:1f:a6:17:73:35:b6:7a:db:85:2c:ed:
ae:4c:ae:b9:90:f9:b4:05:9d:39:db:b1:b1:2a:da:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.174.192.0/19
192.150.234.0-192.150.237.255
192.199.32.0/20
Signature Algorithm: sha256WithRSAEncryption
47:41:ef:eb:71:73:e7:55:97:0c:2a:2e:59:21:e1:c0:26:10:
1a:d1:f6:77:9f:b0:84:a9:41:60:3e:69:14:c4:96:42:41:8e:
6c:36:35:fa:3c:40:d3:11:db:00:ac:bd:ca:8a:17:e5:b7:da:
46:c0:ef:cb:f2:34:05:41:97:4e:87:25:39:ba:73:4c:49:00:
5e:e7:f3:70:f8:e7:a8:80:a2:47:54:ad:d1:3c:d4:4d:7d:f1:
8b:08:e6:be:47:bc:0a:fa:5d:f4:45:13:03:9d:ff:f0:f3:43:
a6:97:c3:c8:fe:4a:00:2b:0c:39:fd:63:30:03:e3:c6:71:6a:
a4:5e:d4:92:80:ec:0e:97:26:43:f4:78:e7:25:7e:f0:e8:98:
3b:50:60:75:68:77:87:34:84:27:c5:72:2f:b4:04:a5:3f:7f:
26:66:de:26:bf:7e:d5:f8:b1:56:da:58:d1:e7:61:3d:d1:e0:
58:61:09:42:9e:0d:70:b4:69:95:e4:8a:e9:a1:52:99:e1:a4:
99:3a:c9:a4:12:ae:e3:fc:33:b5:60:11:6e:12:e8:38:b4:76:
2d:53:50:3a:23:c7:67:35:ae:28:6f:4c:96:3e:c0:e2:e0:d6:
96:b4:8a:d9:f7:b8:3a:7f:2f:77:7b:4d:eb:6a:39:19:e5:80:
13:e8:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:42:24 2025 by rpki-client