Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.cer (raw, json)
Hash identifier: pAGh7hxBsl0VSrA44pWN1B7XdLSeynVrRwLLxnR5+EA=
Subject key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F08
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Dec 2024 16:21:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 131.242.0.0/16
IP: 147.132.0.0/16
IP: 161.143.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24328 (0x5f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 6 16:21:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A917E4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:40:ac:87:b3:ff:58:20:35:96:bf:52:a7:
59:8b:87:9b:e9:60:d5:3d:3c:b7:68:30:60:f8:df:
01:79:5f:58:db:37:e7:f4:b5:3a:96:ab:b7:ac:3e:
c4:5a:64:64:e0:d8:44:47:0b:18:23:fc:cb:a4:a3:
ed:71:6e:17:0c:33:b1:32:ca:6c:b0:b6:d5:21:03:
2d:73:89:24:41:15:de:0f:fd:ed:7d:2a:86:5e:7e:
32:65:b2:1c:3e:5c:7d:60:3a:49:f1:2d:0a:85:4f:
72:fb:5f:22:4e:58:ed:14:eb:b8:36:7b:09:b8:04:
8f:0f:fc:5d:ce:ca:8a:22:b7:a8:cc:39:8a:a7:dd:
d3:84:7c:b0:05:c4:ad:d7:4e:06:ba:07:4c:4b:8b:
6d:8c:f1:b0:f3:06:6a:38:d0:21:5b:2e:d1:8a:46:
d0:2f:25:9b:91:3f:fa:fd:b2:72:ef:42:23:27:80:
23:d5:5f:c2:fe:f2:17:dc:9f:45:af:78:dd:5b:7a:
5d:dc:c9:f0:c5:f1:31:c3:98:da:18:7e:d6:a5:36:
63:57:b0:15:15:4d:9d:40:e6:4d:9a:f5:59:1f:db:
5a:e8:1f:29:ad:0e:52:71:96:23:0f:a4:4d:e6:2a:
95:1f:13:b9:2d:68:09:34:ed:8b:90:c4:87:58:97:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.242.0.0/16
147.132.0.0/16
161.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:08:df:c2:71:ed:ca:8a:d5:6d:f9:6d:0c:d4:1b:4d:d9:12:
9a:2d:82:3e:e9:b1:6b:45:c8:2b:24:89:6d:13:5f:83:84:c7:
d7:b2:c0:3b:db:11:70:29:40:16:1c:67:29:97:ea:d7:6b:65:
95:d4:40:89:bb:73:cc:f3:a6:e0:40:a0:7a:6b:8a:c4:a4:10:
a9:9e:1d:28:29:c6:23:4e:6a:f2:a8:4a:d9:1f:db:3c:fe:e0:
9d:1a:da:c2:80:99:91:c8:2a:f9:f2:b8:47:f1:67:86:23:48:
05:f8:57:89:b1:19:33:42:51:b8:39:3f:9f:2d:43:6d:7c:59:
b0:95:25:f3:bf:05:ed:d3:bc:a8:9e:ba:6a:55:68:0e:36:cc:
85:97:1e:1f:7f:5d:8b:d5:29:ac:30:be:f9:a0:26:c3:54:ab:
e7:1e:5f:d7:d8:d0:74:85:fb:b4:d8:94:c4:cd:7e:23:51:66:
cb:5a:5c:8c:4d:f2:14:d6:31:43:fe:84:ab:5d:10:13:cd:4f:
f5:bf:3b:31:a4:7e:0a:87:7b:09:ac:db:3f:33:83:8e:6d:06:
7e:ef:29:14:b0:9f:5f:56:d6:02:85:57:bf:ca:48:ca:fd:84:
b3:7f:e5:a4:8c:84:db:0b:8c:da:3b:88:a5:b0:83:0d:e8:81:
94:de:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:51:21 2025 by rpki-client