Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
File: w9iTsikbOh4b9fTwQdEFLizLslo.cer (raw, json)
Hash identifier: iJ2iO6KDQHtmuV7UmH2/VTxM4OpKuf5GMRC94akkbMQ=
Subject key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Apr 2025 19:33:56 +0000
Certificate not after: Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25509 (0x63a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 1 19:33:56 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=A915ADC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:12:1b:ae:db:5d:ae:a0:53:f2:c0:91:b2:
f9:95:b1:e8:17:d3:c8:d7:6f:25:fc:e5:ed:63:ec:
24:cb:e3:ec:7b:e2:44:61:70:8a:ed:67:e6:04:b6:
80:8e:9e:10:ea:b5:30:6b:6a:94:b7:59:ab:81:36:
fb:41:3d:a1:07:2b:1e:54:67:68:e2:ef:73:e3:64:
48:65:f2:59:f5:e2:1c:30:f1:49:17:f9:95:b5:e0:
a9:cc:c5:94:0b:7a:35:93:aa:86:fc:09:4d:65:e5:
1a:59:fd:32:07:ff:72:6e:c0:51:b6:03:87:43:09:
a5:11:a0:99:ea:82:9c:ca:f0:1c:c1:e9:e8:9c:00:
e4:1b:fa:4b:0e:9d:13:1a:27:4c:c9:ea:23:b2:bb:
c3:7b:8b:e5:ce:70:44:8f:b9:75:19:8b:89:42:96:
ae:75:62:67:8d:92:68:ee:7e:7e:3d:4f:1a:7d:91:
da:7f:99:ac:1f:36:3e:c4:42:51:b6:ed:16:56:81:
b7:01:3a:2a:c1:b9:88:c0:3e:96:fa:6d:fd:c6:e7:
8f:09:c8:83:b1:0a:33:37:d2:99:50:29:66:67:8a:
b8:b1:1e:9c:1e:97:29:fc:98:45:ee:e1:32:9b:d4:
3a:a6:c4:92:39:56:00:eb:fc:5b:d5:ea:5c:52:5a:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.64.0/23
Signature Algorithm: sha256WithRSAEncryption
13:86:58:c2:a5:07:5b:fa:de:58:55:95:15:59:81:cd:bc:f9:
b2:bc:01:48:df:0f:0f:ee:a6:28:67:69:ec:46:f9:fd:b9:01:
45:c6:14:c6:9c:db:07:1f:0d:4d:e8:5d:aa:58:80:73:76:70:
6e:ec:42:6d:0b:fd:b0:d7:e5:74:81:0c:ee:50:2f:61:4d:ee:
dc:ac:f2:3f:30:3e:27:02:74:4d:37:5a:58:e5:c9:56:98:c5:
b9:ae:4f:4d:61:f0:aa:fa:e8:28:43:56:5f:48:52:ae:02:b3:
73:68:17:0d:f2:f3:20:28:5a:51:45:e3:9b:03:04:be:53:34:
70:d8:02:c7:23:4e:cc:c6:91:c4:6b:6e:38:a1:f5:57:e4:36:
1c:1d:9b:55:62:29:4b:db:c7:18:04:16:d5:5d:d7:89:cc:05:
2c:77:c4:9b:db:f5:62:e7:27:c7:84:18:49:1b:37:5e:c6:24:
7c:b1:3d:90:9c:2d:de:7c:14:95:0c:8a:cc:ff:35:d2:c5:96:
7b:f8:18:e9:e5:e5:f0:a2:b9:2c:1f:a8:16:41:c8:7c:e1:5b:
66:e8:31:9b:16:79:ef:22:8b:ad:1a:79:62:b1:13:b9:3c:eb:
73:06:9d:67:7b:85:42:59:30:76:e4:62:ed:c8:5e:36:cd:d5:
03:82:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:35:18 2025 by rpki-client