Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
File: gOknW25uvGrXWF12r7akALUULD8.cer (raw, json)
Hash identifier: MKwMwmHwUWCBKONlCWKC6d/FE+aJ0S5Zot1/Buks2QI=
Subject key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6083
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 20:42:52 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.136.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24707 (0x6083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 20:42:52 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D313B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:5e:0a:55:9c:f9:f6:10:12:66:aa:b0:36:
5e:72:7c:07:b6:5b:c5:45:c4:f0:18:7f:d6:9f:0f:
96:e4:1e:e7:0a:94:d7:d3:d0:e6:66:44:a7:c1:a4:
d5:b0:a9:b6:be:8f:9f:aa:f4:86:5e:e9:74:4a:5d:
8a:58:06:b3:83:96:c5:56:28:c8:69:3e:d8:a2:32:
6b:e2:32:84:8e:ee:55:ea:c7:60:2b:ce:bb:e3:04:
d6:e4:9e:8f:7b:c2:c0:51:80:d9:0f:b9:65:a9:02:
fa:de:64:d2:7c:24:07:60:05:5c:7d:54:9b:49:92:
e4:ae:f8:42:b0:3a:8f:ae:01:d8:2d:b8:12:42:d7:
54:7e:e9:14:fd:4c:0a:fe:06:75:62:fe:a8:8a:ea:
45:80:b2:2d:70:55:06:a0:e0:f7:cb:e4:6c:3a:c4:
a9:23:f9:a0:46:46:5f:8b:5f:e5:5f:2f:56:1e:39:
06:ab:a8:96:24:eb:6e:5f:82:1f:84:19:be:de:55:
c8:d8:ab:ba:89:4d:ae:ad:9a:c2:4a:a9:de:1f:3d:
3c:ba:30:9d:4d:87:48:af:c9:ef:fc:08:a6:b6:38:
48:14:ad:be:c6:65:be:b4:ff:76:08:39:88:2d:1c:
31:76:81:af:02:9a:26:7b:b8:5b:96:af:5e:a9:a9:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:32:0d:ba:e0:dd:6e:90:74:b1:3a:34:9c:65:45:ed:cc:30:
19:43:3e:63:4d:2c:3c:0a:61:03:10:0e:33:8b:f0:a0:06:97:
c2:2a:a8:4f:91:cd:dd:34:46:a6:1c:2c:9e:3b:1f:24:32:94:
87:4f:6c:5f:05:a7:91:81:b5:e7:74:0b:4e:22:f7:fe:df:ae:
95:6e:7b:08:b9:31:83:ad:2b:0c:5a:33:b0:ef:8c:fd:aa:2c:
ae:99:f4:48:b9:bb:9c:4a:00:23:5d:a0:b4:4b:8e:17:2c:a1:
5b:a6:f3:c7:68:2a:94:ce:c4:fd:ec:0c:a2:fd:3c:6c:23:35:
be:c0:50:c5:fb:34:78:51:ba:4a:e5:46:28:f2:80:2b:78:77:
67:a4:f7:8d:bd:54:c5:f9:ce:3b:45:d4:08:a0:7a:1f:5d:f5:
5c:c5:d5:77:26:ac:e1:76:5f:37:53:31:ae:48:42:f9:43:03:
c0:3d:e4:4a:bc:bd:d9:90:f7:2e:67:a7:77:22:c4:c4:16:75:
a6:c4:a4:c5:18:c7:bd:b9:9e:ec:9d:9e:15:ac:b7:f6:00:e8:
6e:e9:0d:0a:49:9a:0e:02:a7:d3:70:21:8f:17:7f:6c:75:b8:
dc:60:ed:5e:d2:d2:f8:3f:77:28:d0:d4:d2:78:e6:a0:27:05:
6a:1a:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:53 2025 by rpki-client