Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
File: D429p9DJoeyhlFxhtykg9aoOlGc.cer (raw, json)
Hash identifier: vh40NksY8/2v8Gk1xW1terZM+vIvM36T+ynOb7Fi0P8=
Subject key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0235F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Mar 2025 16:14:20 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 45.112.84.0/22
IP: 103.51.164.0/22
IP: 2402:1880::/30
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144888 (0x235f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 6 16:14:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91FAF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:3c:17:23:66:55:27:4f:8a:50:cf:17:c3:
f6:cd:cc:c8:0c:01:40:c9:a1:b8:dc:0e:b0:6e:44:
22:be:02:1c:20:9c:15:da:c9:ed:0d:f6:f5:9c:1e:
87:a9:03:7a:5f:62:cf:a9:19:c8:a3:97:e4:b4:c5:
09:6e:ed:a1:a3:ac:7b:3a:46:e5:28:cb:f3:cb:22:
1f:f0:58:20:80:be:c3:a1:7c:ad:e1:6f:be:bb:80:
41:bd:88:4f:48:ce:b7:f2:00:e9:48:79:eb:3d:6b:
6f:48:04:d4:e2:c9:57:31:d8:94:e2:aa:ca:9c:06:
3f:66:bf:91:7d:c2:a3:65:dc:98:60:ef:b4:34:f2:
56:8b:cd:dd:00:9b:fb:a7:4d:bb:26:97:e4:be:4b:
b7:fa:0e:8b:ac:71:98:1b:09:07:92:ae:94:58:43:
54:59:8c:e6:c9:de:6b:11:23:fc:0f:e2:ec:ae:ae:
9c:82:93:d0:06:d1:ce:c5:de:f4:c3:9d:48:36:fe:
e4:62:88:27:b9:e3:75:b3:26:de:c3:32:a7:94:91:
0a:59:31:7f:29:7b:41:ec:e6:f6:7b:68:31:b5:0c:
6f:f2:cb:b4:7d:42:29:11:f8:46:0f:b4:be:7d:bb:
f4:f6:b5:5c:fa:8b:7f:cd:71:59:98:74:65:7b:db:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.84.0/22
103.51.164.0/22
IPv6:
2402:1880::/30
Signature Algorithm: sha256WithRSAEncryption
bd:b3:e9:96:91:6e:b0:c0:6b:5f:73:52:1a:4c:4e:fe:07:0a:
cc:c1:7f:d8:b1:1d:c0:3c:31:be:3e:e6:f1:19:73:1b:ed:03:
e9:6e:bc:a6:40:c9:f1:7c:18:71:8a:75:0c:4e:d9:ae:d6:18:
a0:bb:69:bd:c4:cd:0a:02:11:69:21:f0:47:f7:01:5d:b3:49:
7d:c4:79:5b:47:41:83:77:68:0c:b0:55:cc:8b:0c:ed:37:42:
2f:07:fd:d9:af:e2:7e:fc:2e:2e:24:c0:bd:12:4b:64:f7:c1:
c1:83:49:c9:3f:23:04:f4:16:b5:39:66:68:d4:e7:92:5f:7f:
f7:58:ab:24:23:15:dc:94:ea:b6:e9:a6:fd:38:c7:ee:a8:36:
fd:6e:f4:20:c1:70:85:00:c1:22:45:4a:b0:c4:af:58:e2:e5:
3b:3f:f8:a3:f2:8a:d4:b1:dd:66:db:f1:fa:9f:b7:df:a1:b6:
26:bd:4b:db:df:50:cf:ae:3b:6b:c5:08:d6:05:bc:4c:26:98:
f7:ee:58:30:d2:bc:e6:13:66:64:fc:aa:6a:35:e6:03:00:e2:
ae:bf:50:9c:6f:7b:0e:86:d3:f2:c7:fb:c9:0f:fc:d9:4f:7c:
3e:15:b1:24:6c:4e:95:2f:9c:7a:79:4a:32:5d:6d:cd:92:fd:
b1:66:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:37 2025 by rpki-client