Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer (raw, json)
Hash identifier: 9BtEQ6TReUtjRgakyb7J0/eqrdZLmWSey/FnDQgExhg=
Subject key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Feb 2025 18:09:03 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25020 (0x61bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 1 18:09:03 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A917530D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:52:87:37:e9:a5:4f:17:7e:d0:5c:a9:fb:
d9:68:f7:b3:84:f8:41:52:64:e9:01:61:71:81:29:
d0:d3:c5:df:65:8c:ea:5f:53:90:6e:54:c0:0f:fd:
0f:85:83:e8:37:1e:47:07:59:ef:e1:fa:ca:b6:ee:
fb:d1:c2:a5:a3:c8:d3:b6:54:65:ad:43:f7:25:14:
79:36:69:b4:95:0f:b8:47:da:7a:3e:f1:97:4f:5b:
94:a7:1b:12:df:cc:4b:5a:61:2f:96:cb:30:ef:4c:
a0:9b:3f:b9:9a:27:41:2b:e6:0b:9b:4f:2e:f8:84:
e9:31:d8:00:f5:96:a7:be:62:24:2c:fa:d2:cb:d3:
5b:a7:ab:10:51:4b:24:8a:14:51:1a:06:de:c8:0a:
2a:9e:b0:c7:ae:c1:d3:05:19:d0:a3:1c:e3:76:10:
84:27:d0:34:9c:d3:70:8b:59:34:76:7e:b3:78:a3:
69:26:26:5e:3d:87:c2:04:dc:98:33:00:10:6a:09:
f9:f6:0d:e1:22:e1:5c:84:9b:14:61:86:cd:6b:be:
84:8b:bc:de:2b:56:ca:9c:61:c2:2f:f7:af:c4:be:
7b:84:57:13:41:3a:21:56:72:de:d2:80:67:48:bf:
2c:9e:db:9b:b9:02:5f:1d:65:ed:98:36:2b:6c:98:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.226.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a4:24:b3:1b:2a:f9:2c:14:03:69:74:c5:1f:34:ff:6a:9f:
ee:80:65:d1:31:ea:f9:3e:bd:a5:07:e3:1c:55:b1:d7:75:27:
7d:f3:fb:16:59:5c:7c:13:88:bf:93:9e:d7:ae:f8:37:fd:39:
23:81:62:1d:5b:46:0d:9b:d4:3e:61:d9:e8:48:f5:61:5a:63:
7a:b7:a9:6c:9b:5b:a8:9c:db:4a:06:06:a1:b3:bc:68:88:b4:
c1:5a:c0:4d:f3:41:12:ba:47:ad:93:82:eb:8f:99:d3:0c:61:
90:d7:01:6e:b0:6b:bb:c9:75:6a:7a:29:0c:c7:c9:b2:88:2d:
0f:61:eb:7f:fd:fd:2c:6d:c8:34:f2:cf:c9:cd:6d:df:0b:52:
6a:f5:12:e3:43:b7:68:81:d4:2e:1c:fe:f1:0d:51:64:1f:9f:
b1:3f:ee:fb:1b:46:4a:da:97:d9:c9:a3:fa:87:6d:d8:f1:96:
81:59:b9:3a:b4:df:e5:75:4e:d1:91:93:f6:6c:ba:54:21:3f:
b2:e9:5e:b2:7a:73:78:a7:05:a7:8a:d7:d4:69:9a:c1:05:ea:
08:2c:38:88:49:af:17:5f:78:86:ba:14:3f:85:b3:9b:a0:8f:
0a:31:8a:3b:36:18:39:81:92:6c:48:8b:33:d8:b1:de:b0:4c:
4d:19:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:41:25 2025 by rpki-client