Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.cer (raw, json)
Hash identifier: KtQHJeuTqbdneDSAFPDM/MHxalb1AtRD18GqkuYHVvA=
Subject key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0235E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Mar 2025 13:27:15 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 152458
IP: 2001:df3:7140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144870 (0x235e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 6 13:27:15 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91326B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ba:2b:80:e1:8e:7e:93:30:a6:7f:4f:4e:
d9:e8:60:63:9c:a6:f7:55:22:d9:17:ae:e5:28:16:
0a:06:8c:f9:7f:e9:42:02:68:12:77:55:60:4b:82:
a5:cc:40:53:85:2f:37:19:a8:b2:6f:cd:ec:45:7c:
bf:51:e2:d3:a9:50:3b:2b:2c:aa:69:37:d8:08:94:
63:6e:85:5f:73:0c:6d:9d:43:26:f8:53:5e:2c:c4:
a1:a9:4a:9a:53:ab:87:8d:62:da:69:8d:e9:36:25:
b0:34:d3:54:57:e6:7e:78:40:f5:34:c6:7d:19:3b:
c1:b4:08:76:e3:19:85:9a:55:7a:cf:9a:18:72:5e:
21:8b:fe:c2:f5:05:07:4b:43:44:55:99:0c:f4:a4:
4a:f2:9f:19:16:71:e6:7a:85:2e:e6:5d:24:d9:2d:
49:de:8d:12:8d:63:90:e4:32:6d:10:e3:e3:45:1a:
48:a7:5d:9e:25:27:0b:45:f8:a5:b7:4f:11:61:3e:
d7:e4:e3:4b:bb:e3:66:ff:56:52:e6:3c:0f:0b:27:
0e:71:53:6b:ac:83:06:95:d5:56:be:58:65:97:50:
5b:48:d4:9a:7a:ee:4a:d5:3e:9a:f4:0f:ba:24:4c:
47:55:e2:46:ad:fd:ae:bd:af:49:53:d4:7c:f3:df:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152458
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7140::/48
Signature Algorithm: sha256WithRSAEncryption
86:13:6b:a1:57:7c:dc:eb:f4:c9:5d:59:c3:4d:d2:5e:0b:8f:
9b:92:1d:46:24:84:51:6b:c2:53:49:b1:ef:bb:1a:e8:ba:af:
ae:c5:ba:37:10:dc:1d:33:5e:3f:7f:30:bf:cb:bc:b2:82:f0:
11:aa:89:42:39:1d:c1:e5:d6:91:81:34:f8:c1:43:b7:46:87:
ad:b3:50:e8:46:62:93:fa:9f:e7:c6:ce:ae:8e:b6:3c:bc:71:
07:fd:2d:ee:53:ff:f0:df:dd:29:2a:d5:46:c7:e9:1c:29:49:
04:b9:5a:7b:e8:30:17:9a:5e:06:5a:db:40:e2:8c:0e:ab:67:
36:73:55:81:60:36:0e:d7:00:70:2e:d5:3b:cc:a8:a8:ab:47:
b0:82:78:7e:43:08:c6:c4:cb:2c:2e:99:6a:72:b1:6e:b1:08:
22:8e:4c:01:e3:e2:61:5f:9f:e3:a9:71:a2:ab:47:2e:e9:ce:
9b:ea:7a:68:d3:3d:b8:cf:98:b3:78:8e:c7:a6:91:aa:a2:a4:
0f:8a:d8:f1:8d:86:54:98:78:d1:e8:e8:bd:15:b6:f6:81:48:
d3:20:f7:d2:c4:71:ae:22:a0:5d:4d:1b:0b:0f:f7:b1:54:a8:
d3:e8:4f:11:5e:a8:51:fa:b0:ba:b1:11:55:2e:b1:dd:51:08:
95:88:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:04 2025 by rpki-client