Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
File: CVjwl8rkKX3ycoLkGD468UJMj34.cer (raw, json)
Hash identifier: dIUmjSrIjTBexv9/ceLPC3WswXZRCQ+E7X3cPIrgsiw=
Subject key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4546
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jan 2025 15:03:02 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 196.1.105.0 -- 196.1.106.255
IP: 196.1.110.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17734 (0x4546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 3 15:03:02 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A916814B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:13:39:cc:2a:32:0c:5f:2d:1e:5d:b8:df:
fc:b3:6e:27:39:68:c0:42:a1:b9:13:3f:e9:73:86:
5b:53:3d:4f:a7:bc:42:01:3d:e8:e6:0f:93:ba:11:
dd:d6:51:fb:29:78:49:32:8a:47:92:1f:6b:af:1e:
0d:f0:0a:00:b0:91:e7:01:58:d9:03:1c:ec:d9:48:
6a:d6:7c:4f:9a:a8:ae:0b:17:ba:b4:86:88:29:84:
5b:09:72:f6:93:32:4e:5b:a0:ef:57:a1:79:dd:4d:
72:13:31:3b:d3:35:f4:bb:b7:0a:25:7c:c8:95:2c:
15:0c:80:ae:f2:d5:87:af:e2:b2:00:ed:c7:76:5c:
c6:f1:5e:3b:7c:8f:34:b8:e9:fc:01:02:b8:73:78:
ac:2d:17:e1:8f:e2:3b:0f:ae:ed:ef:8c:b1:a9:d6:
66:cf:f0:45:c8:bb:80:85:f2:7a:bd:16:92:44:ad:
e9:dd:22:69:f7:81:e1:c2:31:e9:38:f3:e9:92:7b:
42:5a:5d:2b:51:89:7c:59:b5:bf:e4:c0:2b:71:ac:
53:b0:fd:bf:f7:d2:b9:68:0f:98:e6:e6:13:da:56:
1a:6e:42:2c:71:0b:4b:c8:a2:38:9c:4f:d8:55:4d:
9b:7f:52:82:3b:da:15:cf:07:d7:03:93:55:23:7a:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.105.0-196.1.106.255
196.1.110.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:0d:7f:da:ce:85:65:89:9a:5e:2a:4d:1a:36:6f:f3:9a:b5:
e9:6c:b9:bb:81:dd:f8:82:81:39:35:07:74:30:64:61:94:da:
dc:da:05:7a:46:f5:4b:70:a1:ee:89:fc:84:f7:7a:86:64:82:
38:5d:f9:1d:7c:f8:bd:0c:62:5f:e5:af:1a:29:03:ae:7b:2e:
c0:1b:77:19:b2:ee:af:7a:14:2a:94:28:15:c9:08:3f:cc:f1:
11:e0:9b:21:a7:4b:47:89:36:55:5e:63:87:90:84:b4:ea:06:
c0:bf:48:ca:70:88:8b:b1:36:7e:45:d6:72:77:87:11:6c:25:
73:61:32:d6:9e:c2:d6:a7:23:6c:3c:d4:53:29:56:ea:bb:7a:
11:76:23:a8:ed:97:88:76:1e:34:79:0e:4f:a9:2c:b4:ca:ca:
68:b9:fc:56:42:39:22:dd:58:29:ef:6d:db:8c:71:7f:9c:9d:
25:e1:67:89:34:2d:de:6b:8f:71:bc:c0:8a:b6:20:e2:20:b0:
ae:b1:2e:a8:4e:00:c4:84:78:0f:25:bb:e3:da:35:e3:ca:cf:
c6:73:33:ef:74:9c:31:82:30:e5:4c:52:9c:1c:83:63:b0:a7:
ef:8f:dc:21:b7:9b:99:9b:25:00:8e:ac:b3:83:52:ee:fc:52:
de:7a:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:27 2025 by rpki-client