Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
File: mP6mxE_1MoSDXoHQcN_BggttUOk.cer (raw, json)
Hash identifier: xisVoh+nZ5vZK6TtNj3Fcw3GEqDYnanxTIumr5CH9b4=
Subject key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Feb 2025 06:31:37 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 66.235.120.0/21
IP: 158.120.80.0/21
IP: 170.10.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25014 (0x61b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 1 06:31:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A912F6E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:e4:0b:cd:ab:a9:97:e0:e8:50:bd:7f:2f:
91:2d:1b:93:a8:33:2b:34:e9:b6:c4:29:2e:e7:cd:
d7:2e:bb:a7:8e:66:49:bf:45:d7:2e:3e:4c:97:1e:
9c:02:e7:58:cd:b5:88:08:25:d4:a2:a1:a1:aa:47:
03:06:c1:bc:ba:5c:3c:9e:26:93:47:8f:8e:16:ab:
b6:35:f4:ec:c5:32:3d:0d:fa:0a:b4:b7:be:9d:b3:
c6:99:ca:6d:50:d8:bb:b5:85:39:c2:e5:4d:34:d9:
bf:97:68:6c:5f:b2:8d:58:b2:e0:a4:8f:0e:7c:21:
b3:e4:16:45:17:a6:6a:49:99:e4:36:a4:09:d0:97:
34:6b:18:8d:1c:9b:df:3c:cd:80:b3:c7:71:c2:c3:
b8:95:c3:8b:3d:9a:28:81:a4:24:49:42:b2:96:58:
66:00:3e:4b:06:20:61:d9:e9:4b:a3:40:b9:f5:b2:
15:2c:ed:0b:f3:d8:ec:8e:2a:a1:49:7a:05:14:27:
6f:a2:3b:14:83:7a:67:34:e0:47:24:f8:5d:dd:6a:
82:df:e7:a3:26:0f:25:17:f1:c8:27:17:00:fa:1e:
19:6b:d5:59:38:8f:e7:c8:42:23:c1:03:35:d5:ec:
6e:9d:b1:55:68:1b:a3:6c:0a:be:b7:23:55:bd:66:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.235.120.0/21
158.120.80.0/21
170.10.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:0e:d5:95:c7:a7:17:a3:0b:2c:0e:c9:d1:2f:ca:da:d1:95:
22:e9:31:7f:84:84:7f:b7:86:ca:53:36:75:56:a6:57:22:e0:
6d:b5:7e:cb:95:44:f8:7e:6c:7d:51:e7:79:d8:06:0c:56:45:
9e:67:4e:a0:f4:05:7a:e4:ef:58:c7:e0:f2:37:84:4b:36:d1:
5f:0f:76:50:30:32:48:5d:62:0f:ad:2a:6a:c6:2d:23:a5:e4:
03:8f:a0:b5:c1:a3:6e:1d:f7:05:9e:7d:8d:32:de:3c:10:5e:
82:79:cd:69:55:91:21:a0:f3:4e:ba:a1:66:94:5d:95:67:60:
22:2b:e3:66:4a:6e:10:cc:b5:58:c9:1e:5a:08:75:9a:e0:84:
b9:40:af:0a:fc:b6:ca:5f:69:1c:ac:d5:a8:8e:b9:d7:44:8a:
50:94:de:e9:b3:fc:e4:64:45:fb:82:76:ff:2b:3d:77:ad:df:
9c:1a:4d:b0:9b:28:87:44:48:65:be:a4:2b:8c:92:83:6c:26:
3e:f0:d5:62:69:31:55:a3:a6:cd:b7:9b:ad:84:1d:5e:94:be:
8b:d9:57:fb:56:8d:8c:77:7d:74:a2:3a:05:4c:1b:f6:a9:d8:
32:3d:f9:77:8c:22:06:a4:71:50:42:36:82:d8:7f:d0:54:fd:
09:2d:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:57 2025 by rpki-client