
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer (raw, json)
Hash identifier: Emm/5EUU68Fd/sa46FTgg4ciVoXcuQ8G6c/GpO3z85s=
Subject key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Feb 2025 04:26:08 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.69.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25056 (0x61e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 5 04:26:08 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A919C203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:3a:60:45:7e:19:3c:ff:98:3c:14:48:2b:
3f:5d:25:86:b1:72:16:78:8c:23:bc:b8:7d:83:8c:
94:f1:32:3b:1c:76:46:82:38:5c:69:ab:32:5d:73:
1a:6e:37:fd:8e:66:0f:70:b9:89:36:ad:38:ae:13:
a8:9f:63:18:51:c1:c7:21:4c:ab:6e:f1:74:8a:dc:
c8:1f:17:84:99:d3:2d:09:a7:ac:bb:3e:9a:57:58:
3f:11:0d:f8:ad:f1:d1:c4:4c:84:1c:77:9f:9d:bb:
a3:d8:03:ae:08:51:72:0e:5d:59:2c:32:5f:48:55:
cc:13:1f:b8:80:1d:15:75:79:f8:88:12:41:4e:5d:
c8:f8:77:b8:96:14:e5:eb:a9:1f:2c:6a:2b:89:01:
89:09:ba:3b:2f:06:f2:21:b7:f0:78:0c:9b:84:de:
d7:83:b9:cc:18:18:95:79:67:9b:68:33:d5:cc:d1:
e9:f3:03:71:ef:36:d2:d0:49:a3:aa:22:4c:59:43:
92:90:c3:8e:a0:f0:8a:7a:1d:10:41:d2:9d:89:f1:
ce:6d:ad:9b:9b:cb:86:e0:13:05:71:47:21:de:82:
0e:3b:d0:63:62:1b:87:1e:98:ed:d1:be:2b:d0:ef:
66:8d:60:67:bf:1c:97:1c:55:bd:c0:15:24:b2:49:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.69.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f1:e4:03:80:88:8d:0c:c8:34:99:ec:e0:05:2d:56:00:23:
ab:97:64:87:a3:c2:f6:50:1f:25:00:85:a5:37:13:5e:db:a7:
33:d0:e8:16:94:91:f8:1b:c6:c0:d1:91:3b:e0:6a:1e:ef:4a:
dc:a0:13:06:e5:0c:b7:60:cc:38:53:66:3a:f6:7b:95:88:22:
61:a4:1b:85:53:0c:a4:33:00:c7:1f:8d:06:6f:f4:45:f0:49:
12:2d:40:95:8b:13:2c:78:22:17:04:70:d1:bc:db:54:a4:c2:
63:79:07:7d:30:01:27:65:ca:f5:e6:1d:f4:7d:7a:26:19:3c:
b9:89:e7:f0:c7:bc:6c:51:6c:25:64:da:2d:0d:55:11:48:fd:
c3:5d:34:ca:0c:b0:30:7a:2c:d2:77:b5:8a:ba:0f:88:4f:8c:
f6:3b:5a:6b:9b:ec:0e:28:c5:29:dd:67:b9:ce:7d:42:e5:14:
ba:52:43:0a:96:12:5a:a1:32:ba:4e:5c:c2:6f:f9:77:df:ca:
de:62:56:fa:6b:7f:44:08:1f:16:fc:2a:f6:f0:8e:51:c8:32:
d5:61:32:a2:71:1c:8d:67:ab:46:ba:78:f0:40:a0:db:5e:53:
25:f0:1f:e8:d4:79:f3:e5:a9:41:bc:bc:db:8c:87:12:e0:32:
74:ed:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:57 2025 by rpki-client