Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
File: tIPaBfgQj61WuWetrdJRxslpwlI.cer (raw, json)
Hash identifier: 95lr/QVc8mZP5Ef2yd8od1zLISEV0ZZd/q59EZPI01s=
Subject key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 618D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 12:30:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 192.100.53.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24973 (0x618d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 29 12:30:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91178F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:32:2b:de:29:9c:b1:6c:32:13:c5:ec:09:
35:13:cc:2f:39:70:0c:88:47:3e:a1:d8:b4:03:73:
ad:51:75:45:a1:d6:ee:40:40:7a:6d:d5:23:85:dd:
23:77:22:93:42:e8:4e:62:31:1f:f3:6e:ff:23:f0:
fc:15:6c:98:9f:ac:0a:39:96:ea:cd:e2:49:35:73:
ae:78:42:5f:c6:97:58:47:cd:f1:43:79:75:81:a1:
e0:15:07:1c:a0:8b:48:f0:2c:0c:39:9b:c9:9c:71:
e8:42:e6:11:47:e9:eb:6b:28:23:5b:2b:67:37:73:
e1:5a:c5:f0:38:f7:d9:aa:83:be:26:97:29:1d:93:
50:50:4a:25:dc:87:af:2e:f2:88:5f:b5:25:75:50:
78:b2:cd:e6:42:1a:ba:0e:df:07:2f:2f:ed:65:e7:
24:29:ff:0d:52:34:a3:9a:8f:2a:9e:34:5f:9e:b3:
de:fe:cd:43:4e:53:9c:8d:89:b1:f0:b9:54:7c:f3:
8d:72:59:5c:25:fc:63:34:dd:46:97:65:6d:54:ce:
04:4b:3f:2c:2c:49:7a:e0:8d:29:7b:c8:e0:95:b4:
07:01:4b:50:5b:00:20:a4:da:b1:d1:4c:fe:72:2b:
da:c2:41:9b:f0:41:f8:d6:76:59:b8:28:0c:18:7d:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.100.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:68:2c:3d:78:f0:4e:0e:b3:55:3e:a8:90:bf:89:b7:8d:0d:
c0:b5:5c:26:1e:67:5f:b9:c0:9b:5f:c1:fd:b2:5e:f3:bb:2e:
31:78:eb:da:92:99:e5:78:db:c8:5d:68:25:c6:8d:56:34:d5:
da:1b:f1:1a:bb:e3:49:b3:8e:5c:54:46:0a:c9:e4:9b:15:17:
20:2d:44:88:ab:2d:49:b3:f5:ec:ec:85:62:78:29:21:55:6a:
ea:e3:29:4e:7e:75:d6:36:0c:c1:e7:19:c8:3a:8c:07:cb:59:
71:bc:3f:ac:c2:bd:e1:50:ad:63:95:8d:73:e2:b8:c4:a3:f1:
dc:6d:ab:73:a2:ec:01:4f:9a:b9:96:2b:4d:2f:73:0b:99:3b:
b8:a9:69:1f:fc:af:50:a4:5f:5a:85:20:25:e1:08:6d:b0:45:
52:43:b5:28:91:44:9e:16:0c:d1:df:be:b0:91:e3:91:10:fc:
ed:9b:6b:51:7d:85:24:0a:67:c1:68:d7:b1:77:44:aa:d1:68:
9c:93:e8:58:9a:39:c5:6d:f8:78:ed:ef:4c:00:df:df:cf:e2:
1a:e4:c4:e9:33:56:f0:fd:83:87:89:76:17:47:10:c2:a9:ec:
48:f0:6c:27:40:78:0b:c1:76:b9:4d:a4:f2:a2:b2:6c:a8:ae:
65:a6:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:09 2025 by rpki-client