Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.cer (raw, json)
Hash identifier: IRw6htj99OuoKgnw6LzwqKnxjEzfmmjr78zGLtD+pRQ=
Subject key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F85
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 16:08:28 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 129.60.0.0/16
IP: 192.5.216.0/24
IP: 192.26.94.0/24
IP: 192.47.167.0 -- 192.47.169.255
IP: 192.68.235.0 -- 192.68.249.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24453 (0x5f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 16:08:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91A4B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:ca:a5:53:70:2f:83:db:ee:e3:b4:dc:8b:
09:41:f1:4f:41:60:b8:cc:07:3c:5b:2f:b5:50:78:
04:03:a2:dd:4e:e0:43:35:20:68:78:bd:a6:ba:e3:
aa:39:5c:55:1b:8a:f0:8d:69:b1:09:c8:b2:b7:ca:
a8:66:a2:3e:e7:bb:b5:ad:28:c4:5c:08:35:ae:7d:
84:8e:9a:b2:51:9c:71:fd:f0:b5:ec:d1:2a:df:88:
d1:88:d3:c7:16:fa:35:b7:9b:10:23:0e:7e:c8:09:
37:fa:15:92:36:b3:71:cb:a8:fc:d8:7c:f0:ad:7f:
06:96:fa:a2:eb:5a:38:a3:08:6b:9e:e2:d1:31:69:
c0:bf:98:24:64:a9:3f:d5:2d:33:0a:86:e7:af:98:
69:80:ce:25:5b:9f:54:aa:a8:e2:93:f5:5a:93:2d:
0a:42:43:28:75:75:7b:0d:a7:0c:4e:c9:12:a9:15:
15:5a:05:8a:b2:d6:ae:7c:46:6f:f6:5e:a9:68:73:
3e:12:37:c4:49:bc:ea:40:54:54:ec:c8:8a:ec:e8:
b7:7c:15:c8:f2:f8:5a:6f:81:fa:a3:8e:28:cd:55:
52:98:b4:f1:6e:a0:2d:98:81:6e:67:d1:10:6a:07:
a3:ac:50:9f:06:34:9d:02:ea:0c:2d:3e:18:13:ef:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.60.0.0/16
192.5.216.0/24
192.26.94.0/24
192.47.167.0-192.47.169.255
192.68.235.0-192.68.249.255
Signature Algorithm: sha256WithRSAEncryption
3e:06:fb:b7:07:4a:1d:ac:30:14:7a:ce:70:23:f7:4f:37:31:
a0:78:6f:18:80:55:45:72:c6:a0:e8:56:cf:8b:06:97:48:30:
40:59:b1:a9:9b:95:36:8b:4f:55:15:ac:41:70:e0:b5:8d:3d:
d8:72:67:62:24:25:13:9e:76:3c:0a:65:f3:5a:de:02:8c:f8:
b4:58:28:af:e8:78:c5:6b:94:e0:49:bb:16:76:4d:fe:a0:9d:
9e:4d:69:6d:f7:25:7b:b4:eb:43:2e:13:97:e8:d1:11:80:46:
a8:8c:0a:64:e0:b2:fb:fd:36:d4:05:f4:2f:47:96:14:64:00:
50:8a:2a:d0:5c:37:80:85:f9:c8:24:d7:99:02:11:29:d4:88:
1e:66:bc:b1:85:29:6d:06:13:31:ed:f5:d1:94:84:f4:a9:bb:
23:bd:77:56:65:59:55:62:9e:62:14:dc:15:5e:4f:67:89:a2:
d2:27:69:ac:bc:75:0b:0f:a0:85:02:83:7f:0b:7b:ec:99:7e:
fd:bc:e9:d0:37:61:fb:5a:43:1d:02:25:8e:e4:9a:f5:81:bd:
4b:c6:cb:fe:ba:e5:6f:f0:d8:45:c9:ca:29:fd:fc:5e:11:ef:
20:1d:d3:30:0e:30:5f:51:43:37:72:23:bb:75:3a:ba:32:3a:
cb:d4:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:33:12 2025 by rpki-client