Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
File: cPEzmWaoGrwgfjvuM3CR2fLzydc.cer (raw, json)
Hash identifier: +kw46O9hyuEiCwKycTPj1nHFMcNKnF6DErjhiwS5pQQ=
Subject key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5EEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Dec 2024 20:47:36 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 3119
AS: 40747
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24300 (0x5eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 4 20:47:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:33:24:b9:77:43:52:4d:f8:69:e6:50:69:
ae:83:ee:85:7d:73:0c:d7:0b:ee:71:f7:32:03:6c:
00:37:52:f7:cc:82:cb:22:01:9d:3c:7a:0e:57:55:
39:31:af:1e:ff:0f:8d:2b:b5:79:b0:b0:88:3d:b4:
08:07:14:b5:3e:7f:e4:54:b4:a0:10:5d:38:f5:ab:
cd:df:3f:65:e6:8b:25:ea:fd:27:14:a6:b2:29:0c:
23:1a:65:73:94:2e:ea:b8:e0:00:1c:d1:20:fb:d5:
46:b7:dd:bc:e1:43:b4:af:62:d6:0a:e2:bd:0d:d7:
14:f8:91:71:81:66:5d:b9:39:6f:62:6b:90:73:09:
d8:e0:34:2e:6d:7a:ed:dd:87:a8:42:32:7b:e4:a1:
46:15:13:92:30:5b:50:41:c5:53:4c:63:6e:ef:41:
68:de:b6:0a:c9:0f:7d:84:0d:3c:24:ff:4d:03:fa:
87:9e:9f:8f:d8:15:e0:f5:e1:6b:d5:91:8a:a5:76:
fe:91:ae:ec:16:6e:89:59:f7:7b:77:52:3b:8d:cb:
ca:89:66:23:e0:e9:eb:26:51:2c:e2:ea:69:c4:7b:
82:77:bd:7a:a6:34:ad:77:35:63:29:b1:53:81:07:
7b:e0:92:40:a0:86:73:45:aa:50:11:c3:a9:c6:24:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3119
40747
Signature Algorithm: sha256WithRSAEncryption
a3:5a:9d:05:37:07:c8:5a:0c:e0:9e:0c:7d:7b:2a:00:61:80:
fa:7d:91:63:da:ad:4b:87:3e:f4:ca:bc:9a:57:2f:11:80:a2:
d4:3f:40:bb:2c:07:dc:4a:e4:52:dd:8c:b1:1b:4d:64:1e:0e:
1a:95:b3:40:00:f3:b7:47:e9:d4:00:60:14:4b:5b:5e:07:65:
7c:27:cc:af:44:f9:44:58:5a:2d:90:f0:ec:e1:26:91:f0:dc:
b2:c0:34:be:27:33:bc:ff:a1:d3:a8:13:1c:b2:a1:f3:ec:0f:
9c:69:37:d5:2c:97:b3:40:3f:3e:10:10:60:0a:36:e6:90:db:
16:65:6b:09:f8:01:b8:1b:4d:a0:e0:a9:68:04:22:3c:42:a1:
18:f9:78:7b:c8:75:c1:e1:aa:1a:8a:f1:75:32:49:4e:5b:b2:
6b:7c:fe:96:d3:96:f8:79:1f:e2:da:fe:ce:61:aa:9f:35:ed:
cc:bb:b2:7c:cc:3a:3a:b6:6c:d4:fc:d4:28:a2:fe:fc:c7:39:
79:f0:c7:70:aa:71:42:26:55:74:37:5d:2c:e8:9d:2e:71:8c:
31:c4:6f:fa:da:3c:ec:66:2c:f7:4f:a7:23:1d:6b:22:6d:5b:
78:b7:b1:b5:46:d2:42:6b:05:c6:56:58:84:36:44:4a:94:ae:
0c:be:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:54 2025 by rpki-client