Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer (raw, json)
Hash identifier: TOVJf+ln+WVVf7a/y2LKnfpHPFJrymUbHzv6VVgQhxg=
Subject key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02229F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 21:49:28 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 2401:dda0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139935 (0x2229f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 21:49:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D837B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:15:23:08:23:83:2b:22:92:b2:60:bf:a8:
69:24:f4:29:2b:ab:75:cf:40:6c:1f:d6:a6:b1:0e:
af:72:fa:94:2d:e2:e2:ef:bd:ba:da:93:1d:92:31:
5b:1f:12:22:df:9e:fd:a0:aa:32:cf:2d:56:5d:3e:
19:e9:f7:cc:6f:e6:20:78:e2:e9:35:8f:d9:98:39:
e5:01:9a:fb:20:2a:39:85:71:77:62:08:37:fe:97:
c8:32:a0:8c:2b:66:1c:3f:b0:cc:80:c2:32:7b:1c:
7a:d5:d5:82:0f:fb:19:9a:52:52:3c:4d:a0:68:83:
75:07:da:bf:34:62:ff:39:a2:14:02:c5:b7:56:4b:
79:33:7a:9c:51:76:40:a8:16:b4:db:af:e5:6c:e3:
57:82:81:b4:d4:45:d6:47:58:db:84:67:bb:3a:a9:
65:73:bd:ab:da:dc:53:28:ef:46:87:57:a9:13:cd:
7d:ca:22:32:d3:3e:24:f3:74:f1:a2:e2:e9:92:f0:
c9:7e:40:c0:8d:38:aa:41:06:c8:0a:0f:59:31:55:
07:94:dd:2d:bd:d5:5a:26:b6:73:77:9a:a1:15:8a:
24:eb:62:d8:2e:7d:43:9b:38:db:a7:8c:ee:23:9c:
15:41:e9:9a:bc:f5:6e:2e:0f:0e:c8:21:c2:04:da:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dda0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:15:88:d3:34:d5:ff:04:b2:c6:3f:8e:0f:5a:ec:e4:ce:a7:
6a:e3:f3:e2:b5:1a:55:2c:b5:4c:07:c7:10:4a:f0:c8:f8:12:
1d:e8:6c:41:9b:7d:ec:73:d3:61:5d:13:58:f6:b0:c6:4d:78:
c1:88:75:1a:91:24:2a:60:93:bd:45:dd:9f:6a:06:41:ba:cb:
e1:21:e1:f5:ef:c7:a4:64:f7:cf:83:41:f9:31:45:6b:07:46:
c9:16:3a:d3:12:9c:8d:30:69:44:a7:47:36:88:04:f1:94:e1:
e3:1c:37:0f:85:2f:a2:c7:26:24:9d:bd:bd:8c:f2:7d:e5:58:
6c:af:ec:1e:98:45:9e:02:cc:a0:a1:f5:13:6c:60:60:f2:24:
dd:7b:61:d2:b5:4f:ec:00:2e:b3:54:51:30:fd:50:16:cf:a5:
83:fe:a3:c8:1a:a2:44:f6:f6:43:52:d4:f3:6e:c2:98:71:f9:
55:bd:62:0f:4f:f4:52:d5:37:3b:52:d9:55:cb:16:2c:d7:77:
15:9f:42:7a:3f:08:11:85:fd:27:e9:2f:93:d8:72:bb:5e:63:
53:bf:34:d7:b0:f3:2b:56:94:8a:f6:1d:34:72:77:f1:da:8f:
8b:55:d8:23:6d:bd:8a:eb:dd:01:bf:78:89:98:29:41:e0:09:
c9:1a:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:30:25 2025 by rpki-client