Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer (raw, json)
Hash identifier: PlePRfqQZUlG6SXcRlKzNob/aRIPeMnKHagDzIq0BAI=
Subject key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5ECB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Dec 2024 04:48:09 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.72.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24267 (0x5ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 3 04:48:09 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91A4EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:1a:43:96:42:a4:9a:19:aa:54:90:66:e5:
73:16:32:6d:d3:ee:52:9c:6f:66:50:49:d2:a2:30:
c9:d4:1e:5b:94:20:7e:58:c0:73:1f:ce:00:80:d2:
62:f0:5a:97:86:03:4c:9a:dc:a7:86:14:56:81:0d:
11:0b:e7:bf:e0:6a:b4:f7:c7:92:ae:69:b3:03:ce:
bb:d9:00:04:b6:5d:08:a4:e4:82:19:9f:b2:cb:b2:
10:97:7d:5f:98:f1:89:d5:9d:2e:42:96:6f:8a:d3:
f4:40:24:7e:0b:8d:68:8c:2e:d4:cc:79:d0:fd:6b:
c4:36:7e:bd:0f:4c:4e:1f:4a:99:4c:f9:69:ad:a0:
38:0d:0f:61:d9:51:66:5c:fb:3a:52:35:f3:be:fd:
49:f0:14:4d:72:60:84:60:a6:6a:ba:fb:37:da:5e:
ec:a2:63:92:3e:e8:19:c0:d3:cc:5a:18:8a:0c:c8:
73:90:17:41:0f:45:2d:b2:33:f6:16:42:b7:70:6e:
df:51:35:7d:7a:32:25:ff:8e:39:e9:ec:12:f1:98:
a5:9f:42:59:5e:12:71:9b:65:7e:28:07:a7:08:d4:
4a:10:2e:89:1f:6c:ab:74:1f:a7:24:99:bc:1a:49:
b5:13:3b:95:1b:83:e9:55:41:a5:4b:58:36:c0:12:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.72.0/23
Signature Algorithm: sha256WithRSAEncryption
23:95:c5:07:d9:17:74:14:46:de:00:91:70:02:e2:94:2b:d1:
12:4e:4b:29:08:72:be:63:b1:1e:f5:ee:58:58:89:62:e2:d3:
91:fe:98:c4:68:bc:91:b4:ec:3a:06:86:62:4c:9a:93:ec:88:
e4:dd:a8:34:b7:35:26:b1:25:6a:bd:99:3f:88:72:c0:05:94:
88:f0:b3:9c:73:31:0a:a5:c9:8c:8a:c5:94:dc:71:91:62:5e:
ca:db:71:16:41:34:d0:c4:11:cf:bf:c7:a2:03:74:85:16:0f:
5f:67:57:c5:68:07:b5:a1:f6:36:cf:80:54:2d:fb:96:1a:41:
6b:6f:3f:e5:04:4c:08:d3:7a:79:1c:7d:ec:7b:60:7c:e9:1b:
6e:cb:3a:24:25:02:d6:1a:6e:32:5c:a6:7e:a7:a8:88:7d:66:
77:a9:60:e6:9a:85:d0:cf:ce:c6:3b:e6:f7:c1:50:be:f8:e0:
41:cf:e9:8a:b7:39:3c:67:e0:63:38:8e:da:12:b1:23:32:b3:
a6:70:21:e7:8b:6c:c5:8e:c4:86:0b:34:a0:e0:aa:5f:f9:1a:
e5:fc:7d:a7:02:3f:1b:94:37:53:69:fa:27:57:65:a4:53:74:
23:c7:cb:14:fc:e3:95:1b:b3:14:77:81:09:48:a8:64:c7:7b:
a4:90:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:37:49 2025 by rpki-client