Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer (raw, json)
Hash identifier: Jp3RDEFwHBurKD4X9OUy91sDgMkALxJ00ITEILItX0o=
Subject key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023037
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Feb 2025 16:13:18 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 147006
IP: 2401:bee0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143415 (0x23037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 10 16:13:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A918497E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:aa:cc:bb:57:33:bf:b9:2b:82:b4:ca:83:
04:2f:7b:4f:e9:5e:a9:3d:81:72:76:43:b4:09:af:
4a:68:46:ae:c8:c0:00:f0:ae:b9:84:8a:31:91:c6:
a6:a0:e2:4a:0e:04:d7:db:0a:84:10:4e:10:a4:79:
ce:ba:dd:d6:9a:65:99:44:11:80:97:19:76:b1:b7:
b6:2a:51:bb:97:40:75:12:a4:ea:c3:08:3d:6c:1e:
a4:3a:84:58:4c:02:1a:c9:95:d7:c0:b8:82:fd:b0:
92:1b:8c:c8:33:7b:90:6a:d9:6e:d7:55:3d:c6:8e:
6e:1c:91:6e:90:e4:1e:c3:63:a7:8b:64:80:b3:4d:
03:52:50:3f:84:c5:6c:08:0e:7f:11:65:5a:31:fa:
9f:5d:af:11:cc:4d:c2:e7:51:cc:d8:bd:1b:97:ab:
22:d4:b5:8d:c6:8e:88:6f:51:02:07:47:f5:70:30:
8c:26:65:2d:19:df:c4:66:9c:eb:03:18:b7:12:d8:
91:23:d9:ba:b2:0f:b2:d4:17:4d:5b:1a:38:e4:5b:
66:e2:0e:1a:c1:09:78:36:3a:69:7e:a6:59:f1:7c:
e1:7b:1f:dc:69:3f:80:8e:62:dd:2f:59:81:77:9e:
7a:52:7b:7f:67:3a:1b:bd:86:dd:a3:f9:2d:c1:e1:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147006
sbgp-ipAddrBlock: critical
IPv6:
2401:bee0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:42:aa:54:81:6d:21:d6:b0:83:ad:46:de:ab:5f:1e:94:a2:
e8:c6:18:c6:be:ba:eb:bb:97:96:44:6b:01:71:88:66:1d:f8:
32:60:21:83:33:cd:5e:32:0c:10:07:22:00:02:12:d9:95:b6:
70:3b:f3:d4:74:fb:cc:36:13:be:5b:cd:9c:ee:c7:5c:40:23:
2e:c0:55:96:62:44:45:25:b2:c1:db:09:4d:2c:1c:05:4f:c8:
5a:9a:be:eb:25:d4:ac:53:b7:d0:3e:55:47:a2:fe:6c:ed:14:
89:01:0a:5b:0a:88:eb:ec:a9:6a:ca:68:f8:ca:91:5b:bf:be:
9f:2d:86:b5:11:19:7a:ad:7f:df:84:83:7b:93:f9:e9:11:9a:
ba:bc:70:3e:d9:53:12:72:77:2d:ca:53:fd:e2:b7:d2:55:61:
83:06:c5:fb:d8:bf:36:53:21:46:33:ef:85:ca:1e:61:be:6f:
f0:17:6c:80:0f:07:db:f5:18:cf:d5:6f:3e:b8:a4:e3:fa:32:
b2:d9:88:80:66:72:5c:48:31:51:35:95:81:20:12:a2:05:bf:
be:47:78:18:a3:3e:14:43:0d:b9:8c:ce:f4:8e:38:8b:06:8b:
49:4d:05:47:87:70:28:3c:93:5d:08:23:c0:72:b4:cb:ef:42:
2a:f2:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:26 2025 by rpki-client