Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (raw, json)
Hash identifier: BeoyppMvMP6AQjclk64EWRkkOjuHwwlH4kpeWUbZrMc=
Subject key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5ED8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Dec 2024 14:51:16 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 128.134.0.0/16
IP: 129.254.0.0/16
IP: 134.75.0.0/16
IP: 137.68.0.0/16
IP: 139.150.0.0/16
IP: 143.248.0.0/16
IP: 147.6.0.0/16
IP: 147.43.0.0/16
IP: 147.46.0.0/15
IP: 152.99.0.0/16
IP: 152.149.0.0/16
IP: 155.230.0.0/16
IP: 156.147.0.0/16
IP: 157.66.64.0/23
IP: 157.197.0.0/16
IP: 158.44.0.0/16
IP: 160.30.106.0/23
IP: 160.30.229.0/24
IP: 160.30.232.0/23
IP: 160.30.235.0/24
IP: 160.187.186.0/23
IP: 160.250.152.0/22
IP: 161.122.0.0/16
IP: 164.124.0.0/15
IP: 165.132.0.0/15
IP: 165.141.0.0/16
IP: 165.186.0.0/16
IP: 165.194.0.0/16
IP: 165.213.0.0/16
IP: 165.229.0.0/16
IP: 165.243.0.0 -- 165.244.255.255
IP: 165.246.0.0/16
IP: 166.79.0.0/16
IP: 166.103.0.0 -- 166.104.255.255
IP: 166.125.0.0/16
IP: 168.78.0.0/16
IP: 168.115.0.0/16
IP: 168.126.0.0/16
IP: 168.131.0.0/16
IP: 168.154.0.0/16
IP: 168.188.0.0/16
IP: 168.219.0.0/16
IP: 168.248.0.0/15
IP: 169.140.0.0/16
IP: 169.208.0.0/12
IP: 192.5.90.0/24
IP: 192.100.2.0/24
IP: 192.104.15.0/24
IP: 192.132.15.0/24
IP: 192.132.247.0 -- 192.132.251.255
IP: 192.195.39.0 -- 192.195.40.255
IP: 192.203.138.0 -- 192.203.146.255
IP: 192.245.249.0 -- 192.245.251.255
IP: 192.249.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24280 (0x5ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 3 14:51:16 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9149F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.134.0.0/16
129.254.0.0/16
134.75.0.0/16
137.68.0.0/16
139.150.0.0/16
143.248.0.0/16
147.6.0.0/16
147.43.0.0/16
147.46.0.0/15
152.99.0.0/16
152.149.0.0/16
155.230.0.0/16
156.147.0.0/16
157.66.64.0/23
157.197.0.0/16
158.44.0.0/16
160.30.106.0/23
160.30.229.0/24
160.30.232.0/23
160.30.235.0/24
160.187.186.0/23
160.250.152.0/22
161.122.0.0/16
164.124.0.0/15
165.132.0.0/15
165.141.0.0/16
165.186.0.0/16
165.194.0.0/16
165.213.0.0/16
165.229.0.0/16
165.243.0.0-165.244.255.255
165.246.0.0/16
166.79.0.0/16
166.103.0.0-166.104.255.255
166.125.0.0/16
168.78.0.0/16
168.115.0.0/16
168.126.0.0/16
168.131.0.0/16
168.154.0.0/16
168.188.0.0/16
168.219.0.0/16
168.248.0.0/15
169.140.0.0/16
169.208.0.0/12
192.5.90.0/24
192.100.2.0/24
192.104.15.0/24
192.132.15.0/24
192.132.247.0-192.132.251.255
192.195.39.0-192.195.40.255
192.203.138.0-192.203.146.255
192.245.249.0-192.245.251.255
192.249.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:9b:27:eb:28:22:30:ac:a7:cd:7b:9b:d8:de:5d:de:62:04:
19:04:48:b3:09:59:25:35:13:62:8b:16:e3:16:16:88:b0:ea:
e3:a0:f8:92:d8:13:11:49:f4:9d:b9:7f:35:e6:3b:58:7e:c9:
df:df:d2:c7:c3:c4:4f:7d:36:2c:42:33:9c:e0:56:ae:89:75:
15:bd:b2:fd:29:d1:6d:2d:1d:0e:94:51:28:8c:4a:f1:23:00:
4c:14:dc:96:48:bd:5c:b3:5e:89:80:8f:ce:49:ac:c2:9d:35:
47:11:fb:15:ba:72:11:59:8f:45:93:5f:3c:90:03:65:83:20:
db:41:ec:f0:2a:2f:a3:47:13:ff:41:2e:61:22:1e:09:5f:3c:
db:fa:05:36:45:0f:5a:62:81:86:6c:98:56:80:c8:1f:70:a1:
76:fc:f9:29:fa:13:c1:9f:6f:e7:63:d4:f1:ec:6e:93:ec:58:
6f:77:0e:67:a5:73:3c:af:16:de:fa:02:c5:57:1b:b6:85:bf:
5c:d8:2f:52:c5:a7:84:a0:6b:2a:14:14:11:65:11:a9:53:aa:
cd:b1:df:48:a3:94:6e:cd:6f:a7:74:f6:5d:75:79:9d:11:b5:
c3:7d:be:7a:8c:fe:90:db:60:ab:97:e7:21:d7:21:49:8a:c2:
07:ca:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:46:33 2025 by rpki-client