Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
File: TmiwSN0926X0ePH9KIqGGLqfq6o.cer (raw, json)
Hash identifier: 1pLZ0omKr0FvKHb61yAnvTo0Cqn4Wiq18L7kgwaeCMc=
Subject key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 627E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 17:12:55 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25214 (0x627e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 28 17:12:55 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91FEB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:b6:8d:d3:e0:83:84:9d:cf:7b:41:f9:7b:
48:c4:a8:b9:a9:59:93:76:76:0f:09:3f:6b:0d:81:
7a:13:30:b5:69:4e:9d:f3:d0:d9:36:94:c8:f9:02:
65:b2:6b:2c:6c:39:42:17:27:36:91:da:6b:44:39:
23:15:a0:f9:05:6c:3d:cc:f2:a1:6c:e2:ad:05:b3:
59:cb:94:ea:f6:96:7f:40:46:2b:83:27:73:b5:77:
28:0b:15:35:c1:98:7f:00:0e:6e:ad:db:54:c2:17:
b4:f4:42:98:7a:16:f0:ec:0f:4a:5f:8d:4c:d3:b2:
e2:f0:c7:26:ae:1c:c7:c3:f0:26:d9:ed:15:ea:d0:
25:aa:45:f7:7e:3a:e8:e3:2d:59:4c:d7:19:3d:c5:
a8:a6:7a:d0:84:b1:49:ff:78:41:40:da:b6:8a:e0:
aa:a0:cd:a8:79:d8:42:db:a8:58:22:bb:e0:f3:5c:
13:f9:02:a6:ea:28:62:a6:2c:68:0d:25:9a:d9:e5:
48:66:e0:46:63:57:b4:1e:6a:8c:61:9d:e8:95:93:
86:83:82:45:88:73:08:4b:50:85:70:b8:3a:1b:c8:
8f:15:2f:bf:83:a6:44:68:6f:e4:2d:61:97:90:e6:
50:a4:5c:14:6d:f7:92:97:99:40:7f:51:13:2a:2d:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.224.0/23
Signature Algorithm: sha256WithRSAEncryption
27:2a:41:df:69:bd:31:e1:c5:db:1c:36:e3:e4:2b:6c:61:d2:
aa:8a:3d:5e:26:60:2f:48:10:e6:85:ea:de:3f:74:b6:8e:83:
b5:86:df:43:7e:3d:04:9e:3a:42:c7:69:01:9d:e7:73:20:76:
6d:c6:0e:d0:d2:7c:4d:ad:56:ab:67:ee:1a:34:58:ce:06:b4:
52:68:f2:00:74:7d:ca:3d:83:a8:f1:fd:90:da:4f:c5:bc:a0:
42:50:3e:2a:37:e5:bc:87:86:36:ed:72:4e:24:98:de:d0:e1:
21:d4:a8:6b:e9:6c:cd:7a:e7:96:36:08:f2:44:b5:a1:98:d0:
9e:9b:ad:d2:3b:82:80:53:0f:9f:d2:55:a4:54:89:1d:74:78:
50:54:f6:43:43:4b:bc:88:ea:ec:90:6d:ea:72:56:79:2a:2a:
83:55:1a:72:54:64:95:1f:26:e4:b8:e2:d2:bf:7c:e7:13:71:
b4:96:b7:c3:be:96:98:09:eb:bb:c3:d7:8e:09:79:59:dc:24:
8a:7e:bf:7f:0a:90:a2:2a:d8:b9:6e:ec:19:af:9e:41:4c:9a:
47:6c:65:3b:01:f4:a9:41:3e:73:1a:d1:40:3f:1e:6e:ee:6c:
4d:1b:3a:d0:1d:94:da:6e:7d:ea:8d:da:8b:df:24:cf:5c:12:
a8:fd:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:46:33 2025 by rpki-client