Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
File: PeqLG7hy3RJspkfMN1wgdgJAw4U.cer (raw, json)
Hash identifier: xCrupTPGyzkTghIgz60TbHbpvDn9jmSQEDBxdbSfG7Y=
Subject key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B4E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 07:58:21 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 149506
IP: 2001:df4:4ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138062 (0x21b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 14 07:58:21 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A918F0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:41:fe:8c:e0:df:bb:01:36:13:1f:a4:bf:
41:2d:ce:03:59:b1:57:35:d4:ed:ab:a7:01:16:28:
76:45:bb:43:a5:4b:b1:af:57:76:a4:8b:f7:fc:49:
fc:bd:93:1c:b4:62:62:53:6c:46:ab:1e:b9:f0:7e:
a6:63:e3:df:1b:cc:0b:0c:56:84:8c:0e:bd:d1:91:
83:68:69:19:15:7f:7d:d0:65:26:2a:62:da:70:69:
e2:d8:1e:1c:2d:15:5d:a2:00:c8:4a:b3:fb:bf:c4:
c1:31:f6:c8:9f:75:68:e2:2e:cc:74:2c:41:56:40:
f7:be:da:25:be:75:b5:36:f4:4e:a7:69:07:c7:7b:
57:50:42:05:df:56:b4:ad:bc:f2:59:13:46:16:e8:
05:b3:fb:7f:bd:ae:79:34:b9:fc:73:08:e9:70:20:
68:c5:64:03:d4:e3:30:8f:b9:d4:15:47:b8:05:c9:
84:b6:25:f1:cb:9f:fd:7f:5b:86:a8:2a:05:51:3f:
a8:80:9a:07:75:47:98:16:9d:f5:41:e4:ee:79:58:
4d:c3:26:5a:eb:5d:30:ef:34:cd:d3:28:67:e8:6e:
e2:09:1d:e2:92:2e:57:20:02:0a:45:ae:a6:ee:6b:
70:a7:6e:2c:e4:2c:8b:bd:4a:90:4f:c7:cc:35:fb:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149506
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
bf:13:f7:ec:f2:89:6b:e9:4b:86:e4:1c:01:cb:7c:cd:fb:f4:
87:48:92:af:8b:94:f8:18:72:cd:6a:b8:69:b7:28:1a:c5:ab:
19:ac:cd:33:fc:78:f3:01:bb:61:37:0f:27:63:a8:90:8d:66:
5e:15:01:1f:8b:e6:7c:bf:c1:ec:d5:d7:81:b3:66:59:2c:91:
77:32:1f:89:e8:9a:a9:bc:d2:18:d2:6a:14:99:5b:bc:bd:f7:
11:d7:e1:a9:33:0f:f8:75:87:f6:0f:52:48:99:c5:39:86:e5:
49:9c:a6:34:b4:80:85:65:ef:e2:68:35:a9:53:69:b4:6c:a5:
82:bf:3f:6d:60:fc:6c:64:0d:dd:98:7c:20:69:02:6f:c0:fc:
11:81:37:b3:8d:ef:65:3f:11:1c:1a:2c:a5:e2:76:f6:e4:30:
8e:29:b0:94:bf:20:93:4f:fe:f2:2c:54:95:35:16:13:35:33:
1b:d0:93:71:05:67:cb:99:f1:eb:51:da:1f:f6:86:55:de:d0:
82:c2:8c:b0:22:80:14:35:ee:53:c6:23:6b:b8:02:7d:4c:59:
4f:c0:a6:49:33:06:9f:4d:2b:f9:3c:72:22:0d:16:c1:65:cb:
50:54:87:f8:72:f9:22:fe:76:74:14:3d:3f:2b:c0:30:11:80:
4b:32:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:28:30 2025 by rpki-client