Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer (raw, json)
Hash identifier: dOTl3Rhjtmla0KLZqvarw99DDynDsEpZqOaAIkAMnYg=
Subject key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E6C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Nov 2024 06:04:45 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 198.49.32.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24172 (0x5e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 26 06:04:45 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9161B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:7f:e0:4f:05:c1:69:08:c1:25:60:b4:42:
56:52:15:99:95:be:58:33:94:a7:61:3f:ed:58:3d:
32:0a:ab:fb:fa:a3:50:4b:94:94:de:ad:16:9c:0c:
47:b4:d5:63:a1:30:bb:a5:76:a7:65:29:86:ee:c5:
4d:41:a2:a7:26:e3:53:36:c1:27:83:02:38:49:52:
13:8d:f8:42:af:29:21:f3:9d:58:46:cb:21:33:71:
72:91:9c:d8:b2:ea:44:23:c3:3c:41:b1:62:52:e0:
6c:50:12:16:be:86:dd:4d:ec:67:32:f1:3a:f3:2b:
d2:69:ed:81:e5:5a:a8:a1:29:a7:31:16:7c:32:20:
b8:0a:c2:ea:c4:19:50:70:1f:80:89:73:ac:fb:06:
bc:2f:41:04:6c:d5:d1:ca:b0:d2:be:49:92:d6:df:
63:f2:26:49:a7:a4:80:50:32:d8:3c:6e:60:c6:23:
00:7d:bd:61:ec:9b:91:15:d8:4f:cb:b6:f2:9a:f1:
c2:13:15:1c:14:f8:f7:7b:c7:c0:a8:cc:4a:6e:e6:
c4:f0:54:04:89:07:1a:d3:7d:d7:cd:85:e5:73:51:
f7:e8:a7:61:18:55:0f:8b:cf:09:87:37:b3:1f:06:
8e:99:f9:29:5b:14:64:ef:3b:f5:31:32:81:b3:4e:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.49.32.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:3c:cf:5c:e7:a7:17:f6:e4:d2:3f:21:9e:53:92:09:01:af:
b7:d7:37:00:18:43:9d:9c:3b:a6:64:5a:94:17:7f:76:d4:38:
b6:4c:03:4d:20:d5:91:79:0c:ca:02:22:8e:c5:13:71:4f:cf:
db:6f:1e:64:17:05:45:1b:fb:bb:69:2e:90:02:04:98:84:c9:
db:9f:f7:18:d2:d1:25:a8:bc:ff:db:3f:49:23:9b:b5:3d:0e:
59:61:32:05:dd:b6:5a:e5:f0:70:2d:29:3c:a8:9b:3f:70:7a:
50:e7:0b:f8:4f:e1:dc:7f:e6:d7:1a:c7:f2:2c:90:fb:d1:18:
c0:c5:c7:c7:bf:7f:7e:4e:c0:95:36:54:e4:ee:f5:b2:46:3a:
f1:e1:7d:c9:12:ba:02:b3:6b:f4:7a:8a:f9:3e:a5:7c:f7:2b:
a3:4c:b7:d3:1a:1d:54:a1:bb:7a:3b:2e:68:4a:aa:bd:0e:04:
28:da:0f:f1:ee:1f:77:1b:88:4c:0e:1f:9f:bd:53:fc:8c:c7:
c3:f3:80:2f:b2:06:c4:e2:94:b0:12:9b:a5:f5:be:b0:bb:54:
9b:f4:69:8a:04:67:41:7d:d6:55:96:b7:c8:1c:1a:6a:77:d0:
ad:36:92:57:bf:6c:1d:8b:60:14:1a:cb:bc:fc:0d:2e:3c:bb:
13:db:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:34:32 2025 by rpki-client