Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer (raw, json)
Hash identifier: Nh82S9cKcsu932G0+pS2huOIcS40vzGk5aVCCB7vv2A=
Subject key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 613D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jan 2025 10:11:54 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.188.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24893 (0x613d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 21 10:11:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9199CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:3a:74:94:94:61:d9:6b:31:10:1b:c8:8d:
f0:fd:84:81:0c:44:59:3f:3a:f3:39:f9:f8:9a:da:
01:33:1b:10:97:fb:a1:05:48:79:1b:4e:e9:3d:32:
eb:83:b5:e2:f0:4a:1a:3c:ef:bf:e6:f3:6a:e1:88:
9d:85:b2:ac:20:01:63:7e:d5:5f:61:29:9f:08:91:
b4:00:a9:bc:c0:32:56:67:40:d8:ff:2f:33:cf:fd:
7b:65:80:08:f0:ef:2c:3e:2d:55:39:64:f7:fc:c2:
2f:f3:e3:c1:df:e3:4c:39:d7:b1:65:1e:0f:ae:ec:
97:3f:d8:b3:ac:ac:6f:8d:6f:3a:d2:8b:fe:06:61:
fc:fa:0b:72:e6:08:ec:cf:cf:6d:fc:eb:f1:7e:a2:
0b:32:f4:e5:1c:db:81:c2:ea:e7:ba:62:6e:21:0f:
75:2d:8e:4a:bf:c2:a5:1d:89:81:bc:21:9e:6d:59:
ae:b1:c1:9a:90:f0:72:7b:7b:47:54:a5:70:b7:ca:
5d:cd:64:f3:1b:88:0d:9a:a8:d0:2d:f2:11:32:83:
b5:2d:d3:c0:a9:4d:b5:45:1f:ea:29:6a:31:fe:94:
7e:2b:40:1e:a6:62:df:42:a1:fe:27:c5:97:b9:93:
cc:73:e4:b8:92:05:e7:f3:40:72:2b:f3:7f:95:13:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.188.0/23
Signature Algorithm: sha256WithRSAEncryption
51:dc:7d:e6:be:b6:01:b4:e2:d0:f1:c0:cb:67:13:21:f8:37:
dd:64:b6:16:e8:22:ce:72:51:11:4a:cd:ee:31:a6:de:96:fc:
d3:37:9c:5a:3c:20:af:81:f2:92:32:0f:e5:1d:97:1b:b1:a5:
96:7d:eb:02:cb:5d:b5:72:4b:31:5d:a3:11:56:2e:9a:2e:4b:
d7:46:94:af:50:f7:e5:0f:e4:ea:27:9f:ec:f8:f5:c2:37:48:
05:8a:01:da:57:c0:12:5d:99:a5:3f:8d:51:61:10:0d:d7:bc:
f5:f1:38:1a:c7:c5:c5:c9:d3:1c:0a:84:d8:40:52:07:a6:14:
b5:39:32:48:99:30:e4:5c:85:16:91:df:9c:44:95:ba:34:a6:
c8:08:29:40:f3:c3:91:72:6b:88:f0:0e:a7:70:78:94:ae:c0:
5f:9e:e7:5b:60:19:78:23:21:ff:fd:17:11:26:17:a5:52:a7:
2e:fc:32:b4:1e:80:06:11:0e:6d:97:e4:d5:00:27:2c:66:0b:
2f:a6:e1:20:a1:84:f7:4a:4b:6f:97:fd:af:f1:1a:ea:09:e7:
d2:4c:3f:84:87:45:86:2e:6b:4b:f5:94:d2:68:49:ff:93:e7:
c7:b0:d9:ca:00:0a:c1:a3:a3:e3:0c:59:8b:eb:3d:44:8a:92:
e1:80:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:58 2025 by rpki-client