Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer
File: pb5qRLkApAARc5UWhWBre7U8prI.cer (raw, json)
Hash identifier: h6ZXl1ALJr1dazULYsVm3aPbxdyouRTOnRS1d8uhpIU=
Subject key identifier: A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023B6D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Apr 2025 01:37:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2400:c420::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146285 (0x23b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 1 01:37:16 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91E8A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:97:f6:ce:3f:f9:8c:af:93:bf:09:97:0d:
a0:71:b6:36:9f:28:1f:56:cd:38:0d:8d:e8:36:19:
03:55:6c:a0:74:36:ea:c6:d2:1e:08:71:66:4b:e8:
5f:bf:cf:99:02:a1:58:cd:e8:ff:51:be:43:a3:2a:
23:6b:c0:db:9e:80:ec:5e:65:36:71:41:0c:0e:a3:
52:12:34:05:75:13:b2:19:d7:81:6d:5f:00:6e:d1:
e5:18:13:3a:19:46:d7:cd:55:e4:74:94:36:7b:6c:
51:01:18:a7:cf:17:b8:24:0e:67:8a:dc:c4:d5:e2:
4b:89:34:38:b2:4a:34:60:f7:f7:f1:6b:aa:18:ef:
90:53:82:c4:21:19:c0:b5:38:19:56:db:48:2f:ad:
ab:b1:2f:23:67:e6:8f:25:25:dc:33:b6:73:ba:45:
90:32:cd:eb:01:3b:5e:d0:bd:2f:9b:33:6a:0e:87:
31:aa:ca:e1:7a:f5:5f:7a:4b:fa:dd:a4:34:05:d1:
ec:9a:76:72:57:8f:10:6d:17:12:ed:f6:8d:6d:a8:
8d:4b:a4:81:3d:63:03:29:d7:b4:c6:4a:ae:e0:1a:
f6:06:78:ea:b3:69:92:ea:19:e8:63:b3:0e:84:8c:
b8:85:73:2f:c3:ff:db:e8:88:c7:8d:6b:33:d6:05:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c420::/32
Signature Algorithm: sha256WithRSAEncryption
15:9a:25:42:28:0d:a1:75:a0:66:57:fc:df:09:a4:00:b0:ce:
2a:5c:d9:70:30:a1:65:6a:b0:69:73:eb:47:7a:67:c3:05:d5:
1b:6b:69:26:35:fa:30:39:e9:c0:51:ad:2e:17:ec:84:db:d2:
10:01:65:5f:c2:f6:7f:bd:d2:0b:c6:9b:37:c5:5f:3f:b3:e6:
76:1a:0e:32:ea:2f:97:af:a8:71:28:f1:df:1f:4e:b4:47:12:
9b:91:3b:d2:e6:96:12:8e:f2:db:d5:a7:ab:11:4e:c0:d7:7b:
11:ed:16:de:3b:76:67:83:b0:18:1a:1b:ae:16:70:05:c9:a3:
68:3e:87:b1:0e:ae:4f:49:dd:6e:89:82:0a:fe:23:c8:7d:47:
b4:ef:8d:8b:23:b8:37:b1:f7:b4:3e:fb:8f:c6:c5:1e:66:9b:
08:6e:c1:b0:17:b0:7b:31:6d:33:97:d2:64:b1:9c:30:b8:d7:
b9:44:a0:72:89:21:c3:1f:95:41:3f:b9:b6:74:4a:ec:ca:c4:
53:5b:e0:5d:27:04:b2:a6:37:c2:af:98:1a:2f:9a:9c:6b:df:
54:13:71:3e:d8:9a:5d:fa:95:2a:77:ca:97:70:67:e4:51:1c:
d6:0a:6c:60:f0:2d:89:17:ea:57:ed:c7:dd:af:19:5f:41:35:
76:ac:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:27:24 2025 by rpki-client