Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer (raw, json)
Hash identifier: hyGWFSfD1eVWX2LUb7d40SaPcCoIypK1xBDHH61B79c=
Subject key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 62FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Mar 2025 18:21:09 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.208.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25339 (0x62fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 13 18:21:09 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C146D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:c6:91:c3:d4:b4:9a:1d:9a:20:cf:d1:92:
67:65:42:4e:ae:22:2e:88:19:7b:80:0d:9c:61:ac:
12:28:0a:dd:ad:4a:81:0e:0b:2c:a9:de:4e:6d:77:
ac:98:a9:ad:d4:c6:e2:63:3d:63:93:72:06:58:ce:
7a:12:7c:8b:ee:55:35:77:7d:95:a8:5b:dc:e4:66:
27:d8:7c:73:9e:3c:13:26:04:33:d4:f3:81:ac:45:
ff:c1:b7:4d:da:e3:c2:f2:5a:97:81:32:e3:20:88:
df:ce:07:d0:bc:07:c9:74:d5:3c:69:35:d1:a8:5c:
14:5a:77:b5:6c:1d:01:6c:66:78:f1:b7:18:85:eb:
e5:87:1f:6b:86:e0:f8:73:a8:c9:88:57:f0:6e:56:
76:1d:80:cc:40:03:18:e1:48:c1:ec:2a:c7:05:6e:
8f:42:de:f6:1c:8b:7d:a6:48:7d:d1:5b:b3:33:4a:
11:eb:70:d0:d6:87:66:db:05:bc:07:0b:86:3f:ad:
a5:db:e2:c8:ca:4f:fe:62:72:50:0d:e5:83:85:4f:
6f:9e:d2:ff:09:74:9b:88:8d:0f:41:3c:29:ce:17:
7f:32:2c:51:dd:66:e9:54:c0:e5:5a:a5:06:86:38:
0d:55:26:72:d6:a2:f9:57:ce:db:42:5b:f1:fd:25:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.208.0/23
Signature Algorithm: sha256WithRSAEncryption
16:1c:a9:de:20:a3:28:b7:01:c6:38:9a:99:ab:27:fd:0a:8b:
e8:6d:12:82:fd:b1:45:d1:e6:05:2f:69:bf:49:82:79:c0:d0:
53:89:e6:b2:29:76:62:74:45:3d:a3:20:fc:06:36:ab:fa:35:
57:56:c2:8b:ea:03:f4:8b:a8:b2:62:3d:bf:64:b9:5e:59:a8:
d8:c2:2a:2d:8e:9e:e6:8d:ed:56:e5:2c:11:93:82:74:d0:89:
4a:62:21:19:1c:10:7e:c5:9a:bc:94:4b:85:15:39:93:98:7d:
70:a0:8b:e5:a0:dc:d3:10:7b:5a:3a:ae:5c:6d:21:d7:fa:e2:
3b:7a:14:de:8d:f8:34:b0:d7:e7:53:6b:5b:2e:8c:05:34:3b:
0b:e2:ca:7d:fb:fb:c0:3a:f4:af:09:70:a0:4d:a1:5f:35:43:
b8:56:05:ec:4a:06:5e:34:7f:ee:73:fd:4e:3d:a7:d8:7a:92:
d1:95:69:0a:c8:74:13:07:89:dc:0c:35:03:6d:6a:ec:0e:09:
59:60:8d:c6:22:6f:35:4c:c8:f2:67:b6:ba:f3:e2:b4:90:b8:
8e:0b:4c:23:13:59:5d:5b:be:31:6f:2f:5b:d7:8a:1b:3b:95:
9f:1f:82:21:76:3c:aa:64:19:d4:2a:44:79:4f:03:31:82:6b:
94:84:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:30:54 2025 by rpki-client