Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer
File: YWOpVUwzBnn36hZnixCNlk7ByAI.cer (raw, json)
Hash identifier: EsxMUX67PgzX1cQVIDnxaPG+zrosUz9tzBCHYeDKDhE=
Subject key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6389
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Mar 2025 13:33:01 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.20.150.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25481 (0x6389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 31 13:33:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91364F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:72:6f:1a:cb:53:57:62:bc:9f:15:31:0e:
c0:7b:5d:84:10:e7:04:22:c0:90:f1:04:ec:e7:ce:
81:40:cc:52:01:9e:1a:81:a6:d6:46:57:22:17:77:
74:85:bc:de:37:fe:5b:9f:65:2e:b3:14:17:60:c3:
24:d9:1b:e5:82:7a:77:24:0d:2c:25:c1:a7:9f:88:
67:64:3d:06:c2:d3:b5:f6:26:24:f2:41:4a:55:91:
d1:14:c2:fe:51:5b:d4:39:a6:87:fa:8a:1c:7d:43:
00:a8:5b:84:2b:3b:fc:90:30:08:eb:2b:4e:fe:52:
cd:f3:1b:20:a9:30:26:15:4a:c3:ba:52:41:fd:27:
21:0d:44:1f:9a:b8:6a:aa:74:ae:3b:34:18:27:a2:
8f:10:81:95:68:f0:88:c9:0a:82:f4:95:ee:2f:d5:
10:39:02:89:07:98:d4:e6:e1:7a:67:9f:b0:7c:85:
bd:42:c9:c0:77:0d:be:32:2c:47:e6:39:3a:1a:e5:
2f:7b:53:ae:ee:ce:0c:79:82:5e:e1:f1:51:5c:cf:
5d:fb:d6:1c:10:6e:e6:04:95:22:f0:cc:d8:45:d5:
1b:7e:7c:5c:42:ef:06:35:1d:87:a0:62:c0:7f:30:
b5:da:a3:04:91:78:f4:9a:80:99:ee:26:fa:bf:61:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.150.0/23
Signature Algorithm: sha256WithRSAEncryption
70:96:9e:09:9a:ef:8c:f0:da:18:21:a2:4a:e2:f6:fc:c8:4e:
cf:b7:3c:08:20:a6:17:17:8c:27:55:c6:13:31:08:e4:f0:9a:
39:88:16:29:ff:5a:38:07:57:ab:93:7b:b9:0d:56:ef:6c:7f:
d1:cc:97:71:a9:27:fd:bf:91:5b:1c:c6:03:0d:5c:10:cd:7f:
9c:a9:5d:50:6b:1b:77:96:70:e8:85:f1:4a:76:d2:3a:9a:6f:
e1:d1:2d:a4:48:d9:3e:dd:5e:1b:cb:a2:7a:e5:dd:90:f6:5b:
55:c8:11:56:30:a4:98:e9:83:e9:31:33:a1:40:3c:ac:fb:cf:
21:58:b2:9a:d3:ff:fb:24:7a:3d:e7:68:9e:94:b1:6d:fc:7d:
af:fb:c9:70:27:98:ec:10:f0:53:f7:6b:18:5a:eb:aa:f4:28:
f9:e4:a2:64:82:70:34:4a:c8:83:5f:5a:b8:b3:58:bd:5b:56:
49:79:5f:13:69:2f:53:98:7f:de:35:62:13:31:26:bb:fe:9f:
d6:3c:60:3a:50:fc:0d:e8:31:e6:a9:19:f5:d7:e0:9c:5c:88:
12:bf:71:5f:b2:3a:da:42:5a:52:b3:0c:af:7a:60:06:cb:bb:
49:e9:30:ee:94:dc:7a:b3:00:59:99:ff:87:54:12:e9:4b:e1:
6c:db:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:43:13 2025 by rpki-client