Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer (raw, json)
Hash identifier: RHEwvipYJ6+EF8sEK2Prc6dnV+5xiMM9pyZ4CYYLgrQ=
Subject key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61E9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Feb 2025 07:45:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.14.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25065 (0x61e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 6 07:45:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91836DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:b1:df:fa:e9:93:45:49:83:47:34:db:c5:
f4:a1:a0:db:61:cc:36:d4:00:68:0f:b7:d1:90:86:
52:6b:8a:f1:ef:3d:9d:c4:74:1f:35:d0:aa:d8:c3:
bc:52:6f:ef:48:ae:ac:44:84:58:cf:74:63:5d:7c:
0e:f6:bc:c7:9f:a1:3d:09:0d:af:b2:47:d2:4d:51:
9b:11:98:06:3c:da:e8:d8:2c:98:e7:07:b1:35:99:
ec:e9:55:d6:8a:7e:52:16:7c:0f:90:02:c1:50:89:
59:28:61:65:4e:16:29:e0:e2:16:3a:9a:26:0a:26:
25:d9:9b:cf:a0:60:7b:cb:cf:2d:fe:4f:83:05:00:
fa:41:d5:73:ba:f9:87:ea:84:b5:51:74:84:8f:4d:
c2:4d:35:68:dc:c5:73:dc:6e:dc:d5:ea:13:40:55:
ef:e1:28:86:cd:d6:e8:17:26:0f:df:dc:48:f1:3c:
48:49:b0:1c:69:f9:55:7d:90:a2:4e:41:d0:09:61:
e2:5f:2c:44:23:20:fc:b9:95:8b:26:76:3a:e6:39:
87:43:08:d1:e7:8f:64:9c:f2:44:d6:e1:b9:e6:f6:
f3:81:b2:bf:3c:0e:2b:fc:61:1c:6c:8f:17:03:ef:
50:bc:99:6f:57:eb:93:f6:e2:f2:63:6f:a0:14:ea:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:a9:80:55:99:cc:4a:d1:e1:eb:72:71:2a:df:c5:34:1f:64:
f2:bb:85:e2:a8:cc:0e:59:00:97:e2:73:49:06:8f:ee:8b:39:
82:6e:fa:a9:25:aa:51:3d:f8:4a:b2:ea:2a:8a:e6:20:ab:69:
91:8d:9e:a7:11:f0:d7:25:35:72:29:73:65:27:1e:92:34:ce:
46:1e:58:4b:ce:c2:96:35:3c:68:6b:e3:22:76:b9:cd:e0:7e:
73:e2:7a:1c:29:d0:83:ce:1a:10:9a:6c:b9:47:b7:17:dc:aa:
d1:ff:70:f0:38:53:c7:6f:85:2e:25:ac:79:49:d5:f6:95:37:
b8:0f:04:fb:89:a1:52:7e:72:d5:05:77:e5:c1:e2:20:a6:53:
9a:b0:2e:63:70:2e:98:c0:d2:7e:70:ed:c2:26:f0:1f:a6:8c:
16:5a:dc:39:85:bd:f3:cf:18:6c:fa:13:6b:c5:8c:52:86:5c:
b3:be:de:4e:ed:ea:1c:05:61:12:09:0a:0f:88:eb:b5:6e:d8:
bd:e2:41:a0:9f:73:5c:b4:7e:2c:a7:7c:23:5a:27:f8:06:3a:
14:fc:68:e4:da:ae:60:39:92:f4:42:51:2c:39:20:5f:68:eb:
27:ce:2b:fe:ab:a8:33:32:5f:d4:ff:8d:e5:f4:5c:75:54:2b:
cd:37:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:47:25 2025 by rpki-client