Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
File: w5O8331Fpxlv881tMNYjDfT9xX0.cer (raw, json)
Hash identifier: U105rwIlY6S+oMbx51RfNhdwN5qE3oMHgr40cZcizAE=
Subject key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6077
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 16:01:23 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24695 (0x6077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 16:01:23 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A916ED2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:45:af:d7:07:17:b9:8c:b1:23:3e:c8:c3:
47:36:b0:52:8d:08:1c:07:ed:cc:49:df:7c:bc:74:
bd:02:0f:64:56:9e:7b:58:b0:b2:eb:95:b6:b3:60:
8a:69:a2:d8:a9:51:89:0f:cc:ee:63:2e:b4:ea:88:
bd:da:00:32:56:07:9b:78:be:12:66:e4:7e:a3:99:
8b:e2:dd:db:f3:3f:13:97:fb:d5:b7:08:14:3e:40:
62:bc:87:07:83:4f:a0:f5:75:e5:e0:4c:1c:30:24:
6a:93:0d:e4:12:26:4a:e6:61:5b:51:2a:37:65:08:
1d:0f:96:25:c7:ec:fe:4d:bf:12:e9:f5:1a:a4:dc:
fd:ca:64:a3:df:ec:84:e4:bb:93:d1:9c:2f:68:ff:
a9:9b:df:e0:93:a5:04:8d:ad:e7:54:d2:03:c3:59:
03:84:e1:65:12:b8:17:38:bf:bf:57:84:51:8d:a5:
95:04:b2:9d:b9:cb:d5:82:92:6b:db:33:16:fd:07:
bc:70:96:c1:d6:f4:5f:87:85:0d:77:8b:90:f2:55:
ba:de:36:82:3e:7c:d2:84:aa:4b:46:8e:0b:33:cf:
ec:95:6f:28:ae:79:d4:2e:cc:a0:02:ad:e2:3a:63:
c0:1d:7d:97:a3:f1:1a:25:90:2d:34:6c:76:59:8b:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
00:41:0d:be:2b:68:cb:94:4d:11:1f:23:39:e0:be:0c:52:f5:
8c:f4:e8:d9:5a:f4:e4:f4:b3:00:92:e1:34:19:06:1a:34:63:
26:41:56:f9:68:91:03:7b:fe:e7:2b:e1:11:44:36:c5:2f:a8:
65:d5:93:d1:0a:20:03:e9:3b:62:87:47:db:2b:b2:be:5c:bd:
bb:53:69:fd:f5:6b:4a:5e:d0:6b:6a:be:7e:cc:f4:ed:f0:38:
c4:0c:b3:38:e4:98:f1:99:8a:5f:3e:e6:d4:9f:66:24:56:d2:
a8:83:1d:ce:b2:a1:3d:80:0d:b1:5d:8e:1f:d6:69:03:87:3f:
93:d7:e6:5a:1b:36:aa:21:9c:61:cf:0a:74:40:e2:91:23:2f:
a6:ae:a5:56:f3:9d:ea:9f:00:dd:8b:11:0a:aa:27:a5:f3:4f:
7d:b8:d8:a9:0a:d3:bb:e0:d2:ca:b4:18:01:3b:be:0d:88:e6:
3a:5b:19:e3:2c:84:c8:b9:e7:e1:22:91:93:54:b9:93:20:35:
78:d8:71:07:2a:ba:c5:b9:56:d1:55:41:b6:75:5a:cf:9c:56:
c8:3e:92:fa:f3:34:d0:cc:74:8d:2c:cd:9b:96:20:c3:7e:cb:
94:b2:f1:42:d1:eb:75:ad:06:36:f0:e9:ef:d3:a4:f0:66:e4:
8d:06:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:47:25 2025 by rpki-client