Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.cer (raw, json)
Hash identifier: YHy8bh6t/6ozbTHjz1MNhLbBI36D7tCAaFpDUBGnmhA=
Subject key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0226F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jan 2025 22:46:11 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 203.34.235.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141040 (0x226f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 2 22:46:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91E7A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:6e:e2:f3:5c:4d:86:a9:1e:fb:bd:70:d0:
6c:f8:8d:42:36:52:a0:ec:ba:ee:92:ea:88:32:b6:
20:ce:9a:3b:33:c0:09:59:6f:10:1c:b5:93:2f:04:
9f:b3:1c:9c:c1:f0:60:64:39:4d:cc:74:5e:c2:68:
64:e3:e1:b0:09:71:42:14:3a:69:39:63:d3:7f:b9:
a8:3b:17:a9:df:67:bc:a8:cc:eb:92:73:3e:83:9e:
54:85:f9:a8:ae:e6:8c:bd:2e:5f:c7:2f:d6:c2:e9:
19:27:36:f8:ed:a9:1c:b2:13:7b:ad:64:15:54:e1:
57:21:22:ec:84:fc:54:4c:79:db:f9:df:46:60:34:
83:08:10:48:d0:98:0c:f3:44:18:7a:cd:36:1e:09:
51:20:42:21:d2:90:a0:ab:d1:22:f2:e0:8a:c6:1e:
55:f5:07:de:de:a8:3b:3b:e1:11:e3:91:9e:50:5a:
4d:07:37:84:4a:af:48:c5:26:ff:23:9f:fb:85:d5:
33:cf:02:b8:9f:9e:56:8d:e9:82:fb:b2:07:72:98:
71:54:71:8a:de:db:b6:ab:54:e5:f0:52:7d:31:b6:
2f:46:42:f2:ef:a3:e7:06:22:17:4a:5d:be:b0:08:
02:f4:24:8b:c9:d3:8e:7b:d9:a3:bc:1e:bb:ee:fc:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:c9:91:23:67:94:34:64:3c:58:e1:1c:ac:9c:76:ae:f0:
8a:e2:c3:dc:e1:12:1b:19:80:c7:76:43:0a:20:74:96:e8:d9:
28:b7:4f:c4:b8:2d:10:5b:55:36:b1:8e:c5:e2:c7:05:99:e8:
80:a1:06:6b:5a:39:ae:b0:80:3f:f6:be:fe:9c:de:33:68:39:
d9:e7:48:09:c4:e0:b3:be:13:6c:84:c1:73:b9:79:dd:a5:7e:
1c:53:36:d6:7b:cd:13:6a:a6:bc:3c:27:fd:63:e5:ba:e9:f9:
a7:32:39:36:f8:66:d8:a5:33:51:ce:7e:e5:2b:f3:3d:dd:a9:
88:aa:60:64:e8:b6:59:a8:4a:e8:e9:47:03:6b:21:eb:aa:bc:
8b:67:ca:2e:1e:a2:6d:5e:b1:c4:9a:d3:da:b9:12:4b:aa:ae:
c8:ca:03:04:0d:9a:21:ea:30:81:6e:ae:e8:14:3d:90:dc:4e:
78:a1:b9:03:b4:c8:3a:1c:de:d9:16:c5:2e:ae:9e:2f:68:c9:
7f:c9:36:52:44:0d:c8:dd:50:8e:75:fe:98:d2:28:1a:c0:7b:
de:aa:50:37:f1:00:bb:f8:0b:47:4d:12:cd:08:b7:c7:8d:1d:
fd:9c:16:39:70:77:e6:36:bd:1a:8b:4b:04:11:a4:9a:b1:93:
6b:36:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:45 2025 by rpki-client