Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
File: PzbQyAdues-oPQS3IwcXKogp1bM.cer (raw, json)
Hash identifier: mApxoV80FQG67VEVwAe7WEtiqMbjxSSEcZmWwEyRC/o=
Subject key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 607B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 16:19:26 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.138.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24699 (0x607b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 16:19:26 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9172B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:e0:9b:b1:ff:10:44:da:47:6b:b7:ab:05:
5e:b8:b0:3e:4c:48:1d:3e:13:97:6f:50:75:d5:63:
cb:2c:48:01:ef:11:63:4f:1a:27:2e:46:4f:a1:2a:
d2:72:69:24:ec:1d:e7:f6:f8:de:de:28:26:f1:93:
53:1e:61:00:71:96:04:e4:a2:c6:e5:ea:2d:2c:04:
d3:7d:9a:45:f0:5b:66:fa:e1:f0:e8:2b:b1:fc:1a:
9b:df:53:93:37:df:54:8e:7c:13:ef:be:be:91:93:
b4:3d:a0:24:ed:6d:bb:a1:7d:84:74:6f:58:5d:5a:
09:c4:d1:e6:f6:c0:ac:7e:0d:4c:0e:bb:ef:52:2d:
0b:a8:c6:89:0a:7e:88:e5:4d:da:10:b7:19:ec:0d:
41:6f:ff:19:02:7c:dd:8d:9f:74:3c:c8:1d:4a:4c:
02:99:69:01:ed:f3:85:01:d8:26:f4:6f:32:b1:b9:
28:03:8b:b9:6e:35:ec:e6:78:ba:1c:b2:44:96:67:
28:4a:89:74:f1:1b:b5:30:dc:ab:38:21:b5:0c:0a:
94:c5:a8:90:12:4e:5d:12:85:a6:76:52:da:b9:72:
1a:d9:1c:09:0a:f8:0c:53:d6:ab:9e:d9:4e:53:e7:
8c:c3:9f:96:27:0d:a1:1e:91:1f:6f:c4:2b:63:ec:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.138.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:3f:a2:1b:80:f8:f6:21:58:fa:b3:21:8a:e7:84:ca:58:76:
a8:d5:24:5b:88:e2:3f:76:f2:01:68:a4:62:64:e0:c1:c7:46:
11:99:61:28:92:d0:ac:01:52:b4:88:5f:39:40:35:fb:59:0d:
0e:67:ac:62:cf:3a:b2:43:b5:61:91:1d:5e:80:9a:34:4b:62:
8b:12:4c:ac:94:5b:3a:e9:51:54:04:d6:ee:d3:7f:72:3c:22:
a0:0f:52:02:ac:03:78:ff:21:2e:1b:e8:13:8e:d7:29:27:ad:
6f:f6:2b:ef:ed:e4:c8:17:d2:17:78:5d:3b:50:85:cb:94:d6:
74:a3:53:30:bc:bc:b8:b0:52:b3:90:7f:14:b3:0f:44:2c:e9:
8d:27:03:61:42:a8:8f:5f:80:b9:66:2f:fd:df:65:ad:c1:2a:
90:04:79:60:49:cb:34:fb:3d:cf:34:df:c3:6b:da:e3:43:2b:
38:ba:4d:9d:96:2a:03:54:e3:6d:25:3f:33:f4:64:ba:e1:69:
9b:c5:92:0d:de:17:e1:0a:3f:80:f2:cb:d7:d8:c2:84:f8:ec:
48:9a:da:4a:1a:b2:f2:ae:0c:2b:24:f8:5d:ad:db:77:3b:45:
cf:82:f5:08:d4:70:13:64:ae:38:b9:26:38:97:8e:64:27:25:
b8:2d:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:34:34 2025 by rpki-client