Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer (raw, json)
Hash identifier: ebf3oyxc8+XkuBUzhuczS7MlPyFY0wC/jOB4ZdbvCpM=
Subject key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 624F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 23 Feb 2025 13:03:30 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.222.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25167 (0x624f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 23 13:03:30 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9131711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:e9:3e:ff:1f:66:c3:af:13:02:76:4e:f9:
89:08:20:5e:63:f1:59:cf:11:4f:dd:60:a7:de:e6:
3a:03:66:98:a4:4a:94:a0:a6:20:1b:f3:34:95:d5:
39:1d:3b:41:e5:aa:fa:a3:bb:e0:51:16:43:a9:bb:
2b:8f:cb:09:1f:2d:47:71:10:71:ca:4b:17:db:c5:
85:83:be:ac:36:92:8e:c5:59:76:de:bc:26:14:cc:
80:d9:15:ad:44:06:f5:d2:0d:f3:b4:da:27:17:e3:
e5:d3:50:7a:50:0c:09:89:b2:21:79:38:8a:21:c9:
8a:8f:ff:f3:07:5d:50:9e:24:ed:71:a5:a5:4c:8e:
f8:9e:ed:27:8e:57:e9:39:50:7f:ba:58:3a:43:e7:
13:62:1d:c8:ee:90:39:a0:b6:7a:b3:d2:12:49:ac:
f4:45:68:6b:cb:85:f1:a3:a1:55:c2:6f:2e:d2:14:
75:72:3b:8e:48:5f:33:94:a0:d3:91:1b:8d:7b:4c:
95:14:a0:d4:2d:30:4a:48:0d:7a:ec:34:19:78:8b:
81:fb:6b:59:ae:e2:1b:6e:3e:78:13:06:02:0b:6b:
cb:95:af:21:b8:89:09:fb:50:57:6d:be:40:43:98:
bd:02:07:f5:2b:c3:77:95:63:8f:3c:40:38:1f:ad:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.222.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:69:20:42:e8:44:47:ad:0b:3c:64:a3:fc:7f:75:6b:e2:3a:
2c:80:f3:99:76:ed:54:64:5a:72:fc:f6:2f:d4:90:65:81:ce:
aa:57:33:c1:26:7c:ad:0a:60:9e:50:23:42:2a:6c:22:a7:64:
c9:f7:cb:d2:af:74:b0:ef:4f:4e:51:e3:bd:e9:52:36:90:cf:
84:e4:c9:47:e0:30:d4:f5:da:1f:a1:7c:76:a3:3d:b6:7d:3b:
f8:88:b0:fa:13:06:18:42:88:e4:29:cf:f0:92:37:d6:80:e4:
7d:f2:8e:62:11:e4:22:93:45:0f:27:f1:ea:f9:f4:30:a2:2b:
4e:2e:02:d2:8b:c1:e7:b1:69:ae:40:51:b9:28:83:7e:c6:e8:
34:65:65:e9:43:44:b1:c2:54:ae:38:52:26:34:f4:ff:bf:b2:
2e:03:ee:70:d6:1e:78:ea:c7:57:ea:27:80:8e:37:6e:4d:c6:
86:b8:20:ac:87:f0:cd:22:3f:a3:1d:c5:64:9d:fc:fd:8e:7d:
32:36:9c:eb:c7:ed:5b:51:1d:1e:7d:9f:b2:43:24:76:7c:76:
eb:9d:67:39:6b:b6:ef:3e:77:a6:d3:c7:66:bf:5c:25:61:dd:
8b:d2:4c:f7:4f:c1:6b:b0:e8:5e:7b:70:0f:94:dc:b8:44:23:
5e:e5:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:49:31 2025 by rpki-client