Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
File: vIx594SRodWqRdvkEzwMEPaTZK0.cer (raw, json)
Hash identifier: s+RiNWpR+VJqB6ZGC96hoOqyQdh8OTkoyOOJ18aIjfo=
Subject key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Feb 2025 12:45:55 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25016 (0x61b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 1 12:45:55 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A911DB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:34:4e:fc:16:d8:b8:fe:2e:6a:69:5a:29:
a2:96:24:a1:b6:d1:58:4c:b3:89:eb:5f:ea:58:7b:
ac:96:19:a0:41:03:a2:e8:99:a2:e1:45:d5:ad:7a:
a3:4f:d7:66:be:66:87:6a:a6:45:29:32:e7:20:14:
87:e7:c5:31:a0:23:db:8b:95:6b:49:57:c5:22:f0:
21:e0:29:e6:85:d1:e1:1e:98:05:0f:db:8f:bd:9c:
4c:8e:27:0d:0d:21:16:27:20:3e:a7:9d:e2:92:35:
ea:00:f9:63:ac:61:47:35:f9:ef:6c:c9:c6:ae:69:
4a:06:3f:21:e7:f8:d2:f4:85:54:3b:e5:46:04:5a:
c2:ac:fd:7e:6d:92:87:ed:94:45:83:b9:12:6e:8c:
e1:48:8d:cb:75:92:bb:ed:ce:33:83:3f:80:48:3a:
01:ce:0c:89:fe:1c:f2:1a:29:68:80:5a:44:51:15:
a2:7d:c0:20:0b:40:c3:00:8f:c8:a1:fe:8a:26:46:
5a:09:84:80:d5:c7:c5:a2:7e:9e:40:dd:c6:c7:dc:
c1:32:2d:43:53:af:67:5a:0d:65:56:74:2d:fa:a0:
4e:c5:7a:2a:3a:f9:36:85:f0:8e:f2:79:59:5e:51:
40:f4:05:36:55:6b:01:aa:1c:ca:0c:9e:d5:56:05:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.204.0/23
Signature Algorithm: sha256WithRSAEncryption
55:1b:46:dd:3c:cc:c9:22:f2:ef:38:f3:07:a6:0d:31:27:6f:
0a:ad:bc:94:4e:00:8b:5d:c9:37:ef:ef:8c:ad:89:97:57:43:
0e:9d:0f:32:10:e0:39:66:c4:ec:8d:80:7a:bb:2b:ce:6f:00:
af:5c:d7:e3:87:18:97:34:ca:b6:5a:f6:f6:48:42:e9:e7:26:
d5:a4:86:01:17:9e:80:a4:9b:bc:91:f0:9a:96:e9:cb:10:4a:
9a:63:36:05:de:0b:df:cf:bd:64:19:7d:e8:34:89:1d:3b:89:
5a:6c:16:d3:41:9a:b1:a0:8f:43:b1:54:9d:21:75:dd:eb:94:
48:38:80:61:6d:92:b8:93:67:a8:36:8d:4f:41:d8:0d:f7:66:
d4:4b:9c:6c:49:a9:21:97:be:ee:d7:67:3c:89:27:1c:d9:44:
db:36:a8:78:ac:57:8c:b2:45:c8:9e:aa:45:53:a3:fc:cb:77:
eb:66:39:01:dc:76:19:39:f7:87:de:36:19:ef:31:37:23:63:
f3:1c:24:fc:4f:67:3f:3b:7f:ca:82:6a:f7:7a:5d:c5:70:bf:
d6:80:50:a8:35:20:5a:65:6d:63:47:ec:23:ea:87:6e:b6:69:
bb:44:98:9d:bd:98:6a:4b:90:61:08:4e:95:ad:bb:91:c0:0f:
d7:30:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:51:22 2025 by rpki-client