Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer (raw, json)
Hash identifier: Tu2Myjmrl9Na7TaDvM1Q0RGjuSdmzbEIQEbJf0iVXh8=
Subject key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 60F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jan 2025 17:42:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 23.226.0.0/20
IP: 162.247.0.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24816 (0x60f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 14 17:42:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91CEF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:47:31:86:78:ee:e8:30:ba:36:11:e4:34:
68:d6:c9:49:74:1b:02:96:0a:2b:d3:23:ab:86:8e:
6a:64:f5:3b:de:2d:82:cc:34:aa:68:cb:79:09:14:
5d:a0:d9:96:64:0b:11:7d:4c:68:d2:9c:c2:1e:3a:
aa:cc:9a:2c:82:9d:b8:16:6f:2a:8f:69:fc:c6:dd:
f0:e4:7d:b1:ed:b8:e1:93:c9:f6:b3:04:59:e3:42:
d4:b2:65:49:b2:b4:40:c8:e5:cd:e5:b3:0d:98:eb:
eb:6f:70:42:24:88:7e:e7:f3:95:9b:9e:0f:0b:53:
0f:4b:08:fd:eb:1e:a2:6e:ba:c8:02:a0:4d:70:a4:
f5:9d:c4:62:e9:06:3f:39:20:bd:ab:91:8b:90:cd:
a5:5e:99:e9:58:fd:64:53:17:8a:be:17:4a:5d:f4:
bd:a6:0a:ed:51:9e:2e:0c:13:27:73:e1:d9:89:fe:
b7:d9:a2:1d:d6:9f:12:ec:43:de:a3:a9:0a:ae:66:
65:1a:a1:fc:47:b3:aa:66:80:44:d0:b3:e4:0a:fa:
1e:4e:7a:05:ba:21:46:d9:04:95:55:97:ea:8d:c6:
21:24:6a:7d:ae:b8:dd:e2:ee:bc:ae:cf:77:1d:61:
3a:a4:8a:b3:0e:f5:46:fe:cf:93:cc:6f:99:f9:78:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
23.226.0.0/20
162.247.0.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b4:08:aa:fc:38:60:28:d6:33:82:27:d2:6a:d0:e7:f4:08:
1e:40:99:d1:26:57:af:90:ae:78:c1:d8:8c:b2:6d:54:5b:59:
4b:2c:7f:d0:51:6a:3a:d5:88:f4:c5:47:c9:66:4c:95:91:05:
ce:ca:ba:53:d4:0a:2b:ae:d4:d7:30:8c:b2:1f:9a:52:95:de:
5b:70:e1:f6:ba:0c:a7:77:30:ef:7c:26:d2:eb:e7:23:32:e2:
35:7c:73:c0:e3:3f:22:3b:17:75:90:27:63:55:56:80:5b:a9:
15:ad:98:00:df:b4:dd:38:e7:fe:93:be:ff:25:a8:89:dc:e1:
60:49:9a:17:b9:c6:6f:49:d3:ec:83:af:d9:6a:48:a2:6c:c8:
43:1e:2c:95:60:21:8f:d9:f2:be:6c:7c:f1:f3:25:e5:c0:26:
e3:f3:f5:ed:8c:bd:1c:78:9f:fe:ba:c6:92:d2:57:bc:e8:6d:
e6:55:2a:0b:15:fa:80:1a:5d:0c:8b:a0:51:05:1f:ad:08:69:
9a:dc:7e:db:f5:d9:91:e7:b0:31:2e:19:e0:aa:8d:cb:bb:28:
10:db:b2:46:f4:af:0a:82:57:76:5f:92:27:54:34:2a:1d:a5:
f7:90:cc:89:6b:10:93:76:54:b5:31:7b:2d:8d:28:cd:61:d3:
e0:5b:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:42:24 2025 by rpki-client