Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer (raw, json)
Hash identifier: C7HlqrPEkB+R4ilk/kMdp2wB6nRHmwPPbQOnRRi6U1I=
Subject key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6189
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jan 2025 19:08:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24969 (0x6189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 28 19:08:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91C6CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:9a:e6:68:c9:e6:02:12:bb:52:bf:f5:50:
48:10:40:fe:34:08:47:db:7d:1f:e6:e5:e2:6c:b1:
a0:81:04:90:cd:2d:23:f5:f9:eb:e7:4b:50:0b:ba:
f1:cc:a1:88:79:1b:6c:83:fe:62:23:f0:dc:3a:d5:
6f:01:0c:cf:fa:24:2b:6c:6f:02:40:1c:6a:4d:3c:
e4:72:4a:4d:b5:77:1c:8d:2a:ff:16:5f:53:1e:08:
10:7b:ea:35:c8:fb:eb:7a:82:82:2a:5a:1b:d3:5c:
04:ff:4b:ef:8b:c0:3a:09:ba:6a:37:d4:a1:ae:90:
30:5d:ed:cd:5d:95:c4:b5:12:9d:6d:8b:42:70:6f:
f2:68:6a:37:99:7e:8e:a5:80:bc:18:4e:6f:39:32:
67:9a:21:70:ea:31:66:53:c4:0e:9f:a5:85:3a:5f:
3b:ca:69:c2:45:59:16:a8:87:64:9b:54:0b:b6:e3:
91:a1:af:58:6e:d4:70:3f:4b:fd:f7:ec:7c:a3:f7:
4b:fa:68:18:05:d1:cd:65:be:5e:13:0b:58:bd:ee:
36:25:36:66:08:c4:e7:3a:cd:d1:c8:e7:82:2a:df:
8a:30:9d:1f:5e:cf:ab:d1:04:9d:fe:f8:0b:20:3e:
90:25:12:73:ae:30:cb:2f:63:52:56:6d:56:23:06:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.238.0/23
Signature Algorithm: sha256WithRSAEncryption
71:53:bb:07:94:a7:0a:12:bd:ff:d8:eb:c1:bc:ef:f0:12:7c:
c8:5f:80:11:c1:3d:ec:c0:61:89:5c:d4:5f:a4:d9:43:c6:9e:
18:42:f9:0e:90:a6:9d:44:76:a4:bb:d3:52:98:a6:bb:74:9e:
e4:63:fc:85:a6:25:8c:5a:bb:5f:0c:3a:49:4c:b9:63:af:c6:
f0:e5:04:e7:92:bb:04:82:10:48:26:86:c1:a1:ac:07:ec:2e:
04:c3:d3:50:80:29:0f:e2:21:c6:a0:c6:92:c6:0c:ba:71:04:
6b:4a:ea:9b:ae:56:0c:d7:37:0a:95:eb:b9:15:4e:10:68:c4:
c2:13:22:bd:3c:d5:ed:8c:6c:ff:3f:5a:e8:8c:57:fc:b0:d3:
a1:2a:5d:24:8f:1b:39:f4:d4:4e:7f:e3:9b:71:08:eb:db:e1:
8b:6f:d5:5b:6e:8b:b8:70:2b:71:80:9e:1a:9e:46:43:9f:13:
07:e7:bc:0f:45:9c:b4:36:26:1c:a3:fe:67:e8:8f:04:a7:57:
5e:5c:96:4d:b9:cd:d2:d2:9b:1c:bc:66:54:e7:24:05:70:cd:
57:7c:2e:0e:9b:59:f4:65:a2:46:ca:94:ac:0b:28:05:ad:e3:
8e:7f:64:8d:e3:f3:f8:51:6b:fd:1c:24:20:47:0c:85:2c:ed:
d4:7e:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:46:32 2025 by rpki-client