Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
File: sJELB8hrD_owClKsfDH8tSwFMtc.cer (raw, json)
Hash identifier: 8Rg6tUKpZ+pgjnT6nxaagI0935JgUbfxg86fY8HWhRI=
Subject key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 17:10:35 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 72.35.248.0/22
IP: 74.114.48.0/22
IP: 135.84.232.0/21
IP: 146.88.152.0/21
IP: 159.117.132.0 -- 159.117.143.255
IP: 159.117.201.0/24
IP: 159.117.223.0/24
IP: 165.84.232.0/21
IP: 208.66.232.0/21
IP: 208.71.212.0/22
IP: 208.81.116.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24403 (0x5f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 17:10:35 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91B777C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:43:9f:47:82:ab:02:13:a5:fc:eb:ef:e7:
92:40:ff:45:5c:5a:16:b0:c0:2c:9c:73:3f:ed:72:
6f:fd:d9:ef:bf:4e:a6:73:0a:0f:85:55:a5:62:e5:
c5:7c:2d:25:6f:d8:e2:e3:df:ce:58:4b:38:74:f4:
73:c7:bc:9f:1a:5e:0d:af:a8:77:2f:35:e4:51:47:
c9:fa:e4:78:2c:48:d4:fa:db:7b:1e:9e:61:b6:e3:
a6:f3:8d:2b:b9:2f:ea:fc:a6:04:0d:64:66:9b:a4:
6f:aa:18:9b:95:af:0b:ad:6f:b0:78:c2:8e:e1:65:
cc:6d:47:e4:32:2a:40:2e:c8:d6:a4:68:24:bd:b9:
a5:fb:50:06:90:97:e5:b6:3f:64:9d:35:76:6a:81:
b8:06:db:27:75:a2:dd:7e:1f:5e:ed:4c:e8:da:80:
d9:ac:69:c4:0b:e6:17:d7:23:04:47:b1:cb:50:c6:
d7:ee:b4:ce:97:1e:21:05:9d:b4:c2:3a:06:4d:2b:
7f:d2:9a:e5:11:a0:5e:94:da:c7:14:f3:e5:c2:4d:
b3:a1:70:be:27:4d:ae:49:55:f1:2f:fc:3e:2c:20:
1f:08:60:62:3c:ac:25:64:b0:e5:20:cf:5a:d7:be:
65:33:d8:b5:12:fd:63:99:46:a5:f8:6d:d4:33:d6:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
72.35.248.0/22
74.114.48.0/22
135.84.232.0/21
146.88.152.0/21
159.117.132.0-159.117.143.255
159.117.201.0/24
159.117.223.0/24
165.84.232.0/21
208.66.232.0/21
208.71.212.0/22
208.81.116.0/22
Signature Algorithm: sha256WithRSAEncryption
24:48:a0:e4:62:2b:4d:30:52:8c:23:ea:2f:8b:4f:50:1a:41:
b7:58:6f:51:c6:42:71:d2:1c:07:02:0f:40:01:f2:d4:2b:5f:
42:fe:34:51:23:97:1c:b0:da:3a:ec:cf:f6:e5:a7:d2:f2:f7:
49:a6:b6:9a:71:2a:79:1f:1f:b2:15:2b:8c:df:8a:0f:e8:1e:
9e:67:11:a4:43:1f:5b:93:f9:02:1e:4f:ef:45:25:e3:5c:46:
ac:5b:b5:bc:d9:c3:90:65:ab:11:4d:b8:a6:b0:30:42:48:eb:
65:2f:ec:d0:f0:13:27:24:fe:33:4a:90:eb:28:2a:1f:65:ee:
48:99:8b:47:be:f8:61:74:7d:6b:c1:47:53:55:cb:50:c5:19:
71:44:88:cc:7c:c9:cc:11:bc:b3:1b:1a:84:84:b7:65:8e:f4:
ef:d6:75:06:87:1d:28:32:9f:a1:17:9f:20:71:04:2a:03:de:
00:ef:cd:27:d4:16:86:38:90:93:3d:5c:49:e8:b4:5b:ad:6b:
a1:b5:86:f3:8f:da:25:42:84:51:c9:11:30:13:88:19:e8:2c:
c0:44:24:fa:a2:8b:a1:a4:ef:88:74:51:91:a0:bb:bd:55:7d:
53:7d:a0:a4:d2:9d:69:75:bf:14:05:27:8b:96:e6:e3:08:5a:
d4:e3:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:08 2025 by rpki-client