Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
File: u9oqUrUEjxqKq79cJBcmASd8svM.cer (raw, json)
Hash identifier: Ukm+/LGvM6b6jA8tfuyAzotEBEJhngCmRqer9oQ8FS4=
Subject key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 62BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Mar 2025 13:20:44 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.214.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25277 (0x62bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 5 13:20:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A912BA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:25:1f:00:24:03:72:f7:4b:ef:2c:91:84:
cc:5f:6e:8e:83:bf:28:67:0b:57:3f:ca:69:5b:c2:
d3:58:ce:1b:2b:da:a0:ba:82:14:cf:cf:91:0f:56:
cf:5f:fa:0f:24:47:3e:99:a5:58:f7:cf:8d:dc:ea:
e6:93:04:bd:21:b1:8b:b6:a0:09:59:9d:d8:c2:2d:
3a:98:6c:b8:b3:c7:4e:56:e7:98:28:0f:7a:2b:da:
ed:9e:dd:d2:5b:2c:1f:d4:80:60:6b:a1:45:76:f0:
bd:24:55:1a:83:86:08:ca:e8:24:98:3e:2e:6b:dd:
e8:d1:52:b7:2e:fd:69:19:cd:a4:fe:67:54:2f:b4:
42:7c:32:d9:73:15:18:07:f2:03:06:d3:9c:3a:59:
5f:b1:00:a0:0b:83:bf:1d:db:e8:30:2e:83:f7:32:
f5:11:07:0e:1c:34:86:a1:25:25:b0:23:86:32:31:
50:7b:53:a5:2c:f7:f8:d0:20:df:08:bd:57:32:30:
7b:16:2b:b0:58:91:1f:f4:73:d7:08:16:47:a6:f2:
e1:ef:f7:7b:cd:71:7d:f1:9f:07:f3:cb:05:be:ae:
ae:2e:27:8a:21:43:2c:18:35:e6:6b:25:a6:12:a1:
59:be:86:6f:fe:75:ec:fa:a5:78:4a:43:91:88:f2:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.214.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:81:1c:ad:3a:3b:17:93:d2:c3:4f:96:74:28:71:fd:4d:11:
9e:6a:d7:e9:32:e4:a1:89:6e:6b:a5:32:c2:23:1c:05:37:b1:
5e:f2:43:fb:ff:1b:dc:a5:88:12:33:bf:f9:5d:09:fe:5f:8a:
12:51:fc:8a:87:d9:50:5a:11:34:3c:ff:29:60:eb:ba:d0:01:
fb:c9:56:5e:8c:0b:28:ed:50:66:4a:6e:ba:e3:0c:4a:11:84:
06:8c:46:8d:f0:57:c5:71:3e:cc:36:bc:58:32:23:29:b6:9b:
70:ea:6c:42:9b:18:1a:61:04:32:58:72:7d:c6:ea:bf:5e:55:
03:0f:9e:b9:f6:24:e7:86:60:c2:ac:44:dd:6e:57:99:93:c9:
12:67:73:85:c3:0e:7a:4b:ae:55:07:5d:82:06:c4:e7:6d:94:
e6:d5:ee:a8:d1:d9:91:d3:f7:a0:c3:de:da:2b:33:6b:9f:44:
7b:12:24:93:f4:6a:e4:5c:40:d1:0d:4f:f3:2d:b1:ca:33:d8:
43:8d:7f:82:34:81:ca:7b:a0:5b:64:8c:fd:3b:88:a4:4b:9c:
35:3e:03:06:a7:e9:5e:31:33:90:c2:05:fe:17:65:d7:69:b4:
28:1d:ef:b4:df:52:48:da:6d:ba:d8:93:d6:64:17:7d:35:94:
c5:1d:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:03 2025 by rpki-client