Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer (raw, json)
Hash identifier: DmZJm6p4F4OgRvxRdDW9JSv3ZMtJo/Qn8EhiNTBzHso=
Subject key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6301
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Mar 2025 13:51:48 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 165.173.184.0/23
IP: 199.67.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25345 (0x6301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 14 13:51:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9150080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:c9:7d:05:ba:12:d6:3e:1a:26:fc:c6:c8:
63:e6:63:9c:ed:2e:55:1d:6e:18:b1:02:38:21:1a:
42:43:5b:a4:05:c0:80:30:e4:1f:34:03:fc:ec:84:
d1:d3:52:30:e7:88:76:f7:a8:9e:cb:b5:87:9a:34:
3e:7d:c7:ae:9c:2f:0d:50:ed:92:0f:a0:da:01:f3:
8e:2b:9d:25:c7:d2:ef:82:b0:83:1c:3f:59:e8:3e:
de:30:a8:9a:7c:cb:74:4c:a7:1b:dc:ab:11:e3:18:
29:03:53:37:a2:ef:7d:c9:4a:d6:f5:95:e1:26:c3:
4d:c1:58:0a:e2:03:6e:d2:0a:e6:17:ff:73:dc:d4:
01:17:3b:3e:22:ef:57:2c:d2:3e:0f:09:d8:2a:c6:
93:14:8c:dc:b2:e7:74:b2:e6:d5:5a:b4:16:f0:32:
73:39:41:75:b3:23:4b:42:96:96:a9:bc:dc:5c:be:
20:ce:3d:4c:8d:3a:a2:e1:35:f4:c2:aa:78:fe:f4:
ea:f2:41:cb:77:c6:ef:3d:ab:d7:68:2f:3c:31:78:
99:3a:f7:ee:75:c5:24:aa:c5:ec:e0:55:28:7a:e6:
87:96:c1:61:dc:cc:51:e4:29:ab:bb:96:23:9e:f8:
47:19:32:94:8a:60:17:0d:ab:eb:56:d5:b0:17:73:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.173.184.0/23
199.67.71.0/24
Signature Algorithm: sha256WithRSAEncryption
20:79:21:79:eb:9d:d1:6e:43:32:da:9e:e1:1f:1b:78:62:d9:
5e:35:d7:0e:49:7a:b7:3f:a4:e6:cd:cc:09:24:ff:0e:b3:06:
fa:d5:76:e1:17:87:5a:24:40:c2:51:92:77:f7:3a:27:15:50:
56:fe:e0:88:ed:d5:1f:3e:67:dd:9a:bc:20:6b:9f:77:32:77:
d4:f9:83:f3:ac:15:fb:b4:e3:5a:b7:3a:59:64:05:6c:ca:e0:
7d:b9:29:b3:fa:f2:36:a9:53:d7:36:d6:9c:50:6a:95:52:85:
84:c5:db:cc:c0:80:16:3a:b4:88:12:5a:7c:d9:5f:a4:47:93:
a4:fe:f8:bb:5a:88:50:8b:6c:f5:2c:88:d6:13:9f:c0:09:0b:
11:bf:8e:69:32:44:87:b8:00:9f:46:d4:e4:b6:63:fb:6e:ae:
48:e6:05:68:3f:f4:e7:26:61:f0:2a:61:87:f0:dd:41:f6:5b:
ac:fb:b1:fc:61:32:7c:0d:c9:b0:a1:3a:02:3f:a0:5b:eb:40:
a1:cf:65:bf:f8:00:98:27:4e:ee:ce:8f:a7:f5:c6:5c:09:75:
17:99:02:8a:b0:d1:8d:53:10:4a:36:7e:a1:76:b8:99:3f:df:
5d:ad:e3:5a:ea:c9:af:da:d3:b1:68:a0:34:a6:a9:bd:0e:21:
df:74:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:50:31 2025 by rpki-client