Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
File: cXGYzRpGea2dRS7h2wLQASpDdOw.cer (raw, json)
Hash identifier: OelKJHcTv95S8/0HQntTN5knroarTFEFdH+2nQ4Z3Us=
Subject key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023589
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Mar 2025 11:33:50 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 163.61.250.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144777 (0x23589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 5 11:33:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9169F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:45:18:71:21:eb:2c:7f:b5:2c:3c:47:b7:
12:87:3d:3d:59:e2:59:12:86:7c:0f:9b:33:cc:a7:
6f:b4:cc:fe:3c:03:22:9b:82:45:fa:d0:ed:45:0b:
49:bf:9e:f2:7d:a2:98:10:f1:cd:20:96:b1:1d:1a:
7b:32:c3:92:de:a9:bc:3a:27:8d:bf:27:dd:1f:a4:
c4:1d:8e:00:e7:07:02:3e:7b:32:7a:f1:27:43:f6:
c7:87:4c:57:38:ad:cc:7d:9e:e2:ef:5c:29:6c:a2:
55:d7:b1:1e:20:2d:ac:96:2c:dd:30:7e:bf:ca:23:
ca:b4:5f:cf:11:2d:63:87:25:63:82:66:d6:90:ac:
8f:fb:53:b2:5c:b9:15:5e:48:6a:9c:cc:a7:dc:c9:
c9:26:f6:be:82:be:df:f4:3e:51:2e:ea:0e:df:aa:
04:f2:c2:0e:1d:e2:52:be:10:b3:42:2c:f4:97:1a:
6a:f2:4c:f7:7f:72:2b:30:03:1e:74:a2:b8:87:e7:
7c:cf:b6:ed:d3:2c:15:ee:42:30:1e:4d:b0:84:73:
e2:49:7d:5c:78:7d:6c:38:6e:b0:a8:30:8a:63:0d:
1c:8f:02:47:64:7d:e9:b9:d7:d4:38:72:02:99:66:
c4:b8:d2:31:c2:39:a4:99:91:42:1d:76:d5:bb:f2:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.250.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0e:b6:97:54:02:d6:5e:09:dc:be:08:3c:1f:2f:51:14:f4:
e4:aa:9a:c4:f2:32:9e:9b:d6:92:82:c2:af:1d:85:5a:88:c4:
65:8c:d5:09:30:2b:02:9f:40:e7:52:9f:f5:39:2f:7f:37:3d:
87:50:56:3c:09:c0:8a:d2:9d:9a:ff:7e:ae:8f:89:dc:6a:f3:
08:6b:71:b2:26:69:df:bb:99:06:b9:64:6b:17:62:9a:20:8d:
a2:00:aa:48:3c:ab:9c:20:ee:de:f1:99:11:49:38:22:26:4a:
07:a1:0c:0c:f2:9b:55:7e:80:7a:b0:2f:61:c0:c0:3f:d5:5f:
09:86:c4:47:a0:a8:5d:55:5f:c9:07:b3:47:9d:01:21:dd:7b:
6b:d8:12:50:87:2f:12:fe:69:03:06:3d:2c:8c:bc:ca:40:82:
cd:65:4e:c6:67:11:67:33:93:78:ac:e3:ab:d2:d7:e6:e9:64:
34:80:b7:d4:22:52:10:64:33:b3:c9:9d:2a:f3:e4:67:10:41:
f1:85:e4:79:4a:a4:bc:4e:9a:93:a1:b9:a8:96:7a:0b:f8:96:
e0:5f:ef:ea:b8:9b:e0:7b:61:f1:92:8e:78:be:9a:21:95:b5:
4c:9f:48:79:88:d8:b1:f9:81:06:bc:d0:e1:ee:c2:cd:cc:50:
23:ad:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:29:51 2025 by rpki-client