Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
File: xzON8bdowFB0za7Q_bGkwUrfuLU.cer (raw, json)
Hash identifier: 7FkIfAUFrxC5A5SjI45XAEbbxcsGV6lKEKc5E48vZzE=
Subject key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6270
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Feb 2025 19:52:26 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.134.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25200 (0x6270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 26 19:52:26 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91C167F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:70:05:f9:f3:7f:7e:b1:e6:01:24:f5:ad:6d:
74:a1:c0:10:99:22:e3:80:5d:d0:33:24:22:f2:60:
80:e3:fb:73:78:24:c0:18:5d:6f:87:49:c5:99:da:
33:2e:bd:e8:57:34:b6:9a:37:6b:30:2e:1e:99:5f:
c7:98:61:49:a4:c9:32:2b:81:22:58:3c:72:1b:b5:
da:69:f9:76:35:41:44:49:2f:36:05:d6:ea:24:47:
39:5b:3b:79:54:1e:2f:32:a5:9a:47:d7:cf:7a:56:
2d:19:5f:05:b0:e6:20:ba:5f:60:41:9d:26:f3:85:
5b:5b:ea:cc:3c:ff:36:4d:37:4e:c7:bf:0b:64:b6:
50:41:18:c5:4e:23:8a:9d:1e:c9:eb:1a:d4:94:f8:
4a:46:d2:80:92:db:76:96:52:6d:14:cc:19:1d:d0:
4b:58:bc:5f:2c:a3:fd:7c:a0:b7:4f:c7:08:0c:f2:
bb:5d:75:cc:02:3f:3e:1d:1a:e6:a8:82:ee:15:3e:
44:29:c4:ab:c6:10:d5:c8:4c:06:09:40:8d:62:20:
26:ba:5a:37:2b:b9:fc:5f:45:54:03:aa:be:cd:a5:
b2:ad:aa:a9:fe:0b:92:ae:aa:43:a9:e0:78:ee:da:
a4:39:2c:0d:61:74:3d:14:12:e5:28:d9:6a:78:e4:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/23
Signature Algorithm: sha256WithRSAEncryption
13:39:c5:a6:8d:0f:54:77:5c:32:16:cf:35:f8:e0:3f:5d:36:
a9:50:18:87:0f:59:83:ae:9f:8b:65:8d:46:42:4b:c7:69:87:
d2:80:2d:e6:0a:c9:e0:84:97:1e:a3:e3:2d:bb:2f:7d:52:2a:
8a:d5:8c:ff:3f:49:5e:c7:28:25:5e:4e:98:42:3d:eb:e5:9d:
61:0c:52:4f:d0:2d:f4:ca:19:27:1a:73:6f:92:41:bb:95:9a:
98:90:31:77:2c:2d:ed:14:2e:72:7a:22:8b:b8:b6:da:66:bc:
44:02:7a:b2:47:14:76:16:5c:ab:da:08:f1:f1:cf:b3:2d:37:
b9:01:59:a4:dd:0e:fd:30:d2:ed:df:9d:6a:e6:08:41:05:b0:
19:4c:94:25:b9:92:b9:4d:de:07:41:03:b1:a8:81:f9:13:f4:
5a:41:8e:76:9a:7c:94:2e:39:70:e0:9e:2b:02:30:70:08:60:
fb:16:4e:95:ae:40:56:2a:1a:3a:30:eb:9d:c8:37:9a:67:76:
56:95:a6:92:a3:66:f4:63:67:80:c3:02:d5:85:c6:40:8a:0f:
aa:d7:8f:0d:84:41:5f:24:4e:4d:ac:97:dd:31:28:a3:24:93:
42:1e:bd:1b:c5:50:ab:a9:0a:1b:71:56:7c:50:dc:63:c1:f0:
49:d0:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:02 2025 by rpki-client