Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer (raw, json)
Hash identifier: lbEKEJYWBxWfb2In1HUayA7wDuMsVhdifigTppqQV8g=
Subject key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02370F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Mar 2025 20:08:03 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.107.152.0/22
IP: 2402:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145167 (0x2370f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 11 20:08:03 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91E7ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:4b:60:4d:12:46:fa:61:a7:57:37:0f:ba:
a0:01:23:26:54:4b:a9:6a:86:ea:b7:58:7c:1e:a6:
ac:7e:a5:fe:a6:ba:29:31:e7:42:9f:d8:0b:b3:2c:
c1:93:96:f9:06:27:b8:42:e1:6b:05:91:ce:bd:b7:
2e:ac:1a:5d:af:6d:6a:76:16:d4:08:fd:f4:51:08:
18:24:04:6a:53:2a:b8:b8:00:07:79:fc:7d:46:84:
e2:3c:16:b9:d1:6a:b1:fa:28:14:14:e4:e0:dd:91:
dc:3b:76:82:f0:4c:27:4c:49:e9:3f:ba:0a:3e:cd:
5f:e8:66:2b:1c:ab:fa:f1:20:56:55:b5:bd:80:50:
9a:da:4a:fd:c9:ae:62:94:a7:71:c4:99:a5:ca:dc:
3f:29:82:d6:31:6f:9b:e5:04:fc:c9:b2:ca:bc:79:
07:c3:c1:46:f4:e6:1a:6a:99:82:ce:39:c4:5d:25:
d5:15:44:84:6e:a2:d7:f9:0f:f6:74:00:06:c6:07:
54:a8:0b:e0:da:e9:46:3f:bb:5a:4a:23:2d:02:82:
7b:df:3f:f6:d6:f1:31:d0:72:bf:fd:24:d0:ad:10:
02:ed:23:25:ac:13:d4:67:44:fc:3f:b0:80:00:7f:
2c:7d:50:df:45:f6:4f:98:c0:36:51:a4:a3:22:6c:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.152.0/22
IPv6:
2402:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
d8:36:7f:ad:1f:b1:b6:4f:2e:a7:de:91:fb:94:98:d4:1a:c8:
78:23:27:a0:15:bb:e4:a6:41:ed:d8:7f:e5:ca:f7:cb:7a:05:
d3:28:4d:c9:3f:44:0c:1c:26:3b:40:95:7d:d9:6d:e0:17:3e:
03:f0:bb:56:60:ae:8c:7c:f0:7f:97:30:09:1f:0d:d1:94:bd:
12:50:37:1e:9c:c6:1a:69:a8:42:b3:41:b1:dc:fd:01:73:72:
16:51:7c:8c:11:43:9b:72:c2:11:30:61:b5:7d:ed:7c:2a:20:
12:88:e5:f7:87:d6:42:43:68:a2:18:46:33:43:15:23:04:39:
49:a0:8e:fa:7b:94:4f:03:12:c6:77:8b:c8:64:3f:08:d1:31:
42:fc:eb:87:87:26:ee:a8:40:92:c7:a0:13:8e:ad:a1:ad:3a:
49:6f:23:92:58:0c:78:88:8d:49:20:d2:e1:57:09:ac:a3:1f:
4b:8f:f9:45:dc:c7:3e:c7:3f:ea:db:67:da:95:85:bf:9e:5b:
32:49:3a:77:34:ac:2a:83:f5:5b:d8:5c:e8:ff:21:26:83:0d:
ab:c2:d1:25:f3:5d:5a:33:16:95:1d:30:9e:4d:e5:5d:bf:cf:
84:f2:62:a3:fb:a9:81:92:ac:53:db:1b:a7:de:fe:41:6b:41:
a9:df:ee:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:08 2025 by rpki-client