Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
File: zpBWtMZd44V9TQ4dsAI9YLb30ww.cer (raw, json)
Hash identifier: btWdIukCg7hVmVyMtOYxWiu3CT6Z0M1MskfBPL1tTBs=
Subject key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022935
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jan 2025 16:36:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 2402:28c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141621 (0x22935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 14 16:36:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91DD125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:10:0d:d0:7a:dd:13:38:bb:46:d4:b7:ed:
10:48:cc:56:80:d8:47:bf:66:84:32:e0:16:d8:3b:
c4:4c:ba:77:d7:db:17:e6:07:87:53:d6:59:4a:15:
14:b3:a0:1c:cb:15:66:38:c6:b3:3f:55:da:b0:d2:
c7:30:d0:01:75:5f:1d:3d:75:e2:f8:56:3f:21:21:
e8:ed:97:04:2b:1b:97:9f:0d:13:a2:b8:04:4b:b9:
fe:49:17:c1:83:77:e4:0c:f8:ec:73:53:31:bf:3e:
4e:11:c5:e3:1d:02:2b:bc:8f:da:c4:81:28:b7:b8:
88:c9:f6:c1:0b:3a:f0:1e:3e:7c:03:19:81:7d:b2:
66:2a:0b:25:ad:5e:5c:a4:93:9b:8f:7d:d7:47:75:
c0:d1:46:35:f4:49:36:19:2e:fb:f9:f8:29:4a:f0:
1e:75:3a:a1:fe:2b:b4:fb:d3:f7:ea:22:5e:d2:65:
d6:63:65:61:86:80:c0:62:08:01:4a:1e:c2:89:0c:
25:ab:67:e2:54:92:a6:73:0b:32:b2:33:92:92:b4:
d8:c9:a5:e1:c1:f6:01:ca:55:24:a6:ff:6e:bc:3e:
3e:0f:c2:23:0c:b9:a0:f2:db:3b:3e:cd:d6:10:15:
f9:46:2b:7d:6b:39:a9:b6:0c:18:aa:02:7f:96:00:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:b4:34:5d:f5:df:0e:cb:bd:f6:81:8b:c0:56:55:0f:87:68:
16:7c:d4:0f:79:0f:d7:05:8a:09:9d:a1:36:7b:41:1f:e7:ac:
5a:04:13:c2:92:87:c9:cb:a7:30:f8:55:61:c4:66:58:a7:67:
9c:8d:d7:3f:c5:27:37:26:d5:17:c5:87:95:c2:93:ce:73:ba:
7f:b8:32:05:ee:c6:90:67:94:93:4a:6b:fb:85:57:c4:bd:47:
25:48:91:88:16:de:f3:b9:3c:f3:28:61:bd:9c:5f:fd:b1:1d:
5a:1c:0b:ac:08:96:7b:a8:14:66:b3:8f:7e:e8:e6:ea:cd:11:
65:ef:b9:4c:e4:d9:47:5e:89:7f:fa:0d:f5:06:31:ab:0e:62:
02:5a:2c:de:ee:d1:cf:9e:80:28:94:46:cc:97:fd:cd:72:6a:
f5:d7:23:b5:3a:b7:40:81:f1:f7:53:ff:94:7a:00:e5:9f:b1:
c4:59:5e:a4:5a:c0:c9:b4:9e:36:f7:08:fb:66:35:bc:16:95:
82:3b:78:09:87:97:53:4e:8a:3c:c9:e5:bd:01:18:f1:b5:86:
8a:87:89:c1:d8:a4:a8:05:9e:01:e3:e0:b3:90:d2:49:54:07:
e9:81:38:25:4f:77:9a:34:88:be:d5:9d:34:5a:50:ef:21:47:
fd:51:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:32 2025 by rpki-client