Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer
File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer (raw, json)
Hash identifier: 6TgMQO/O8OJ9dqUL5vWc9nguZSyko11RQDUtY+YpwDo=
Subject key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0238C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Mar 2025 19:01:04 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.108.92.0/22
IP: 2402:63c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145604 (0x238c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 20 19:01:04 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91B9385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:b5:d3:ca:6a:38:6d:6d:84:e3:e6:35:1c:
37:c7:8e:53:16:a5:86:cb:f6:8b:32:b4:b7:bf:35:
57:99:09:aa:75:e5:c8:69:70:5e:e4:f8:36:cb:ef:
82:4a:f3:51:da:96:7f:b5:2e:55:0b:b9:07:84:70:
3d:25:d3:fe:55:de:af:21:6b:20:df:ce:58:57:e4:
bd:90:f4:d9:ab:d8:be:c1:f4:23:ff:77:f3:78:ef:
4e:f6:d3:72:d2:55:c6:bf:7a:b8:16:3c:b7:24:e8:
b3:3f:e6:fe:98:d1:df:c2:f7:dc:96:91:5e:a1:33:
27:af:de:da:e6:af:22:c0:c5:c3:4c:b9:64:c4:be:
34:5e:e4:2a:c7:0c:94:1e:e0:2c:93:1d:d2:1c:35:
3d:65:62:17:5c:da:60:68:54:c3:34:fe:5d:4f:29:
47:8f:1e:04:45:68:a1:60:85:52:7c:72:04:7e:cc:
91:09:df:54:cd:02:ac:66:ad:df:f0:2c:1e:e3:69:
7c:83:c5:27:46:1b:14:3b:06:2d:68:0c:e6:4c:63:
de:db:6d:fe:25:7b:0d:a9:2f:8d:5d:0a:9f:11:79:
01:e3:c8:34:f4:16:90:bd:e1:1c:bb:65:c9:c9:4b:
a2:34:21:dd:de:ed:ab:1d:bd:7d:47:4e:a0:32:03:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.92.0/22
IPv6:
2402:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:b7:50:46:12:b8:06:de:50:b3:37:79:6d:20:0f:81:20:cc:
55:f7:43:ae:3c:4e:e3:13:49:bd:fc:57:6f:7e:92:63:35:94:
c7:8c:0c:ee:fe:54:bc:eb:5f:e2:04:e2:9a:20:92:09:64:aa:
fe:1d:56:ef:53:f7:98:a6:72:75:f7:ea:f2:c6:f9:3d:34:33:
d0:79:d7:4e:cf:8c:54:7f:6d:c9:a3:c3:e0:1a:3e:9f:3a:0e:
be:e4:38:ae:f8:4f:ab:d1:de:9c:50:22:90:2f:be:6c:97:a2:
d1:48:6a:22:3e:63:1e:ef:e8:80:7f:67:f5:2a:1b:80:64:6e:
43:7f:df:f3:bb:88:16:0e:43:2b:d7:ed:8f:08:a9:5b:67:0a:
29:8e:a4:4a:9d:32:5f:d2:4b:f3:5e:8a:13:af:6a:0b:41:e2:
db:74:4f:98:6b:05:d3:42:b9:46:3b:74:0b:af:76:3f:12:22:
b5:99:21:a7:db:70:62:ba:59:a7:f1:9e:ab:24:35:5e:b9:5d:
ed:0a:b6:ee:b4:5f:4a:bf:83:f5:35:f0:0b:31:1e:59:45:1d:
52:07:fa:fc:5e:56:4b:96:08:42:63:dc:c0:ce:b0:ce:5d:16:
7b:25:b6:c6:1f:0e:c7:4c:16:ae:6f:73:d1:98:e1:ed:63:87:
59:b5:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:22 2025 by rpki-client