Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer (raw, json)
Hash identifier: AGLoMno9porXmMlkTmDED4+Vn+8jjPJO1ujXX8/subc=
Subject key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 629E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Mar 2025 14:23:03 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 167.179.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25246 (0x629e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 3 14:23:03 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A914781A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:27:4c:14:51:7c:fb:f9:15:54:59:58:ff:
f6:c3:3e:1c:e1:13:af:01:47:aa:23:fc:14:0b:04:
f3:66:d2:05:a9:b7:af:b0:97:76:d7:e2:bd:63:c6:
cc:fb:5e:9a:f4:61:ae:2a:52:b6:b1:a9:ef:a4:9b:
8c:4c:36:8b:e6:88:0a:32:c6:3d:7f:13:9a:d9:e7:
37:3a:87:e1:36:fa:b9:86:c3:0c:f7:eb:10:97:fa:
34:1e:18:d2:1e:82:5a:91:3d:6a:3b:ac:28:fb:78:
f1:53:ac:3a:ce:f6:17:84:5b:4d:71:11:70:11:64:
9d:e3:1c:da:92:1e:49:14:46:d6:82:aa:6c:6f:24:
aa:21:b0:38:ec:09:83:6e:4a:9c:4f:ed:33:ac:9e:
98:5b:93:72:a0:25:fa:8f:58:5a:a8:cb:67:b8:d8:
8e:22:71:96:9d:05:58:c5:c5:a9:61:b7:33:f9:5f:
4b:b3:e9:d3:7d:06:e1:f4:5d:c6:64:d2:92:07:e1:
40:b6:63:49:0d:fe:d1:e7:e9:bf:cf:48:91:e0:2f:
78:6f:db:bf:aa:9a:97:a6:4a:01:63:16:6c:b5:31:
02:91:71:cc:5c:58:90:86:b4:db:4e:65:b6:7b:2f:
97:aa:8d:b7:18:c5:a9:37:de:ad:37:4c:b5:e5:33:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:e8:ee:c2:fa:46:3e:01:ba:19:91:ce:92:ed:26:f5:15:f3:
46:a2:ac:23:b7:d0:ec:f7:00:3d:1e:2c:1e:b6:28:a3:58:25:
6f:fc:4d:4a:ad:07:f7:cf:6f:29:d9:c6:5b:fc:12:40:23:71:
36:7e:5f:92:c6:73:e0:d2:ff:94:cb:f1:b2:8b:6f:e9:76:7f:
44:1c:0d:52:85:74:54:77:60:cb:5c:04:fd:37:7c:71:a6:a0:
a3:57:32:9f:48:28:7e:93:5b:26:6a:4e:78:b8:dc:2b:6d:c2:
25:0c:54:ff:83:75:94:20:0a:32:88:61:2a:8d:7c:d3:30:03:
f9:ff:0c:4f:ac:15:2e:bb:fd:1e:39:7e:da:0e:84:e8:f0:cd:
3b:b8:56:f4:07:e6:8d:9b:59:e7:9c:41:a7:0e:2c:1c:e9:2b:
ac:6d:e6:bd:72:43:4b:49:93:f7:5f:15:40:61:c5:cd:9e:38:
9d:74:29:97:2d:f7:f9:6b:89:ab:29:f0:79:f8:61:aa:ed:00:
ac:2c:00:5a:65:74:84:e9:d8:74:b9:1e:21:a7:37:01:c5:76:
ed:5a:f7:83:40:98:04:1b:06:4b:f5:dd:d5:22:96:30:80:15:
f3:c4:21:76:e5:68:53:14:7e:17:0e:b5:ca:b0:a6:eb:d0:39:
d2:8c:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:34:33 2025 by rpki-client