Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer (raw, json)
Hash identifier: SraOSYg2jF4bO5RJrOxCAf9Km2z7ArhndJb1TrAWw0k=
Subject key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6127
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jan 2025 03:29:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24871 (0x6127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 20 03:29:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A915FDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:37:e6:ce:63:6b:e5:36:b4:d6:70:ba:07:
a2:6d:55:4c:c3:94:5c:aa:8d:cf:f0:89:f5:7a:31:
fb:a3:5c:8b:5a:06:68:ee:b9:54:bb:31:34:56:2c:
0b:28:85:b8:bb:5d:3e:fd:14:46:3d:8c:56:e8:bd:
19:13:28:17:3d:df:a0:e3:b6:53:30:34:99:29:2d:
2c:f4:75:b9:48:12:b5:18:04:c0:75:e9:ab:b5:1b:
9a:29:42:db:71:44:68:02:a5:2a:8e:2e:72:c8:ce:
03:a0:86:6a:54:56:16:f0:78:ce:2f:ff:8e:5f:95:
f4:01:99:df:2f:b9:3b:37:3e:81:d1:3b:c2:42:49:
99:d0:4b:10:1c:7c:e8:2f:5a:3a:ed:07:94:e1:0e:
16:10:5a:10:24:a6:9f:09:23:c6:ef:ec:d8:3b:97:
45:58:6c:2f:50:a5:bf:28:01:65:6a:09:cf:61:5f:
da:9a:d7:c0:5f:38:b5:23:bd:dd:8f:11:cd:b1:98:
0c:e9:02:ee:10:59:1e:5e:f6:49:bc:df:a1:67:d4:
d6:b9:28:65:27:29:52:87:d8:32:61:1f:ce:4b:79:
86:75:ab:e2:96:d7:ec:86:1b:4c:e8:22:10:8f:51:
40:b1:16:b1:d7:ef:50:ed:25:a0:79:dc:0c:6c:d3:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.218.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:14:18:41:2f:e5:2d:d1:0a:0d:77:18:d2:82:d8:70:d3:33:
ad:94:6b:5e:59:72:4b:ec:16:60:ec:ee:c0:17:f9:bd:8e:81:
44:cc:76:95:cd:46:cc:12:32:35:ee:cd:73:a2:00:a5:f2:f4:
fd:91:94:d6:58:8d:df:30:43:99:59:f6:2d:38:c2:d5:3f:04:
7b:e9:22:04:f1:ee:f7:02:43:46:9d:84:d0:fc:5f:d7:ad:d0:
a8:f2:0e:e0:70:67:56:3c:22:86:36:1d:4d:b2:3e:bc:21:d4:
97:25:a1:c9:b6:80:e1:c0:3f:68:a9:34:77:56:8b:6e:e9:82:
90:fb:63:17:2b:4f:bc:f9:79:ea:a9:81:85:ee:57:e9:e3:f1:
a9:6c:fb:dc:72:a2:cd:6d:77:bd:17:6a:3e:ba:50:52:5e:1d:
5f:b0:be:0b:65:33:a9:4f:78:00:3f:ba:6b:df:e4:66:57:7c:
29:1c:d3:52:03:9d:10:5a:07:4a:48:e8:06:ba:de:02:d5:bf:
1c:d0:29:83:68:4a:77:96:ef:8a:c0:a4:06:e1:76:84:6e:0f:
a0:4f:ce:31:00:b2:45:0e:06:c6:de:d1:3e:a0:0f:07:0e:64:
c9:d2:36:5b:a0:3e:a8:ce:1c:bc:02:19:70:7e:37:62:81:fb:
2e:b3:d2:b4
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTIwMDMyOTE0WhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3
RTRDNUY5MEQ5ODEzODA1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL5DN+bOY2vlNrTWcLoHom1VTMOUXKqNz/CJ9Xox+6Nci1oGaO65VLsxNFYsCyiF
uLtdPv0URj2MVui9GRMoFz3foOO2UzA0mSktLPR1uUgStRgEwHXpq7UbmilC23FE
aAKlKo4ucsjOA6CGalRWFvB4zi//jl+V9AGZ3y+5Ozc+gdE7wkJJmdBLEBx86C9a
Ou0HlOEOFhBaECSmnwkjxu/s2DuXRVhsL1ClvygBZWoJz2Ff2prXwF84tSO93Y8R
zbGYDOkC7hBZHl72SbzfoWfU1rkoZScpUofYMmEfzkt5hnWr4pbX7IYbTOgiEI9R
QLEWsdfvUO0loHncDGzT+/8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSWe5fZ4xEl
DYKULSfkxfkNmBOAWDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZERDkvQjYyMkZBOEFENkRFMTFFRkIwNDc0RTFCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGREQ5L0I2MjJGQThBRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1S
SlEyQ2xDMG41TVg1RFpnVGdGZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH42jANBgkqhkiG9w0BAQsFAAOCAQEAmhQYQS/lLdEKDXcY0oLY
cNMzrZRrXllyS+wWYOzuwBf5vY6BRMx2lc1GzBIyNe7Nc6IApfL0/ZGU1liN3zBD
mVn2LTjC1T8Ee+kiBPHu9wJDRp2E0Pxf163QqPIO4HBnVjwihjYdTbI+vCHUlyWh
ybaA4cA/aKk0d1aLbumCkPtjFytPvPl56qmBhe5X6ePxqWz73HKizW13vRdqPrpQ
Ul4dX7C+C2UzqU94AD+6a9/kZld8KRzTUgOdEFoHSkjoBrreAtW/HNApg2hKd5bv
isCkBuF2hG4PoE/OMQCyRQ4Gxt7RPqAPBw5kydI2W6A+qM4cvAIZcH43YoH7LrPS
tA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:38:49 2025 by rpki-client