Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer (raw, json)
Hash identifier: pddpMPtFzNUvi5wNgHAbmD4YJQcpAtv0ROiId7qqTcU=
Subject key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4A9B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 03:44:24 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 80.249.0.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19099 (0x4a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 03:44:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91FDD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:16:60:3d:0f:82:da:d0:a7:5c:a8:8a:c2:
dc:20:e6:63:3b:14:7f:f8:94:c7:37:84:1a:a8:6c:
53:d1:3d:74:e0:1a:f2:ec:ed:c8:9e:ce:84:39:c2:
29:f9:d4:c8:15:b2:b5:c1:d8:85:68:c5:95:65:1e:
86:e3:5c:98:aa:77:5e:68:da:db:90:ad:47:71:5a:
1a:08:56:9d:c9:00:65:0b:10:65:a2:28:8b:4f:8b:
c5:88:63:8f:0d:67:08:31:26:8b:53:d0:66:80:b5:
c1:36:89:8b:a8:f7:1a:ba:a2:2d:2f:b7:47:dc:66:
53:84:01:2e:11:77:0b:7c:a5:c9:61:e1:c8:2e:98:
7a:c1:a8:9c:cd:3f:e8:30:71:b5:c6:b7:90:2a:d6:
6e:d5:3d:59:5f:b1:2a:79:c2:b5:dd:52:24:83:71:
bf:a2:93:1a:5d:95:57:78:00:50:ff:4b:9e:ed:99:
62:ed:ea:ec:08:66:be:33:b3:ca:88:0f:21:3b:d7:
ab:da:20:37:5e:74:04:76:87:8b:ba:9e:27:07:b9:
9a:9a:b5:6e:7f:d9:bb:d7:ed:3b:bb:f4:9d:c4:dd:
4b:7f:b5:9b:52:f6:d0:34:9b:20:43:42:76:ac:b6:
69:26:ce:71:3c:bf:ac:70:49:4d:49:98:58:66:c0:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.249.0.0/20
Signature Algorithm: sha256WithRSAEncryption
c5:34:5f:58:fc:38:50:4c:e6:66:25:fe:20:7f:68:3f:1b:57:
ad:12:72:b4:76:0c:c2:aa:3d:8d:92:00:e4:4f:d8:36:8b:bd:
6a:c7:fe:fd:14:e6:e5:59:b9:70:27:04:c9:69:71:00:37:86:
d8:78:54:e4:ec:ac:27:40:ac:f2:4b:a3:8d:ee:32:c1:a5:be:
ea:06:05:02:b3:48:c2:ae:cb:21:7a:3f:19:b3:d0:80:d3:82:
28:9c:8c:e5:49:f6:50:bf:2f:24:78:fb:c9:21:b7:b9:c5:91:
9b:74:c3:e8:e3:59:51:71:9b:a1:2e:22:25:ef:51:3a:86:47:
7b:33:67:03:22:7c:a5:48:bf:42:26:aa:da:d1:96:0e:7f:f3:
94:51:34:af:c4:bf:a2:8f:77:db:e0:62:0d:2c:0a:16:7e:fb:
e2:e2:f3:66:b4:09:c0:75:88:2c:c0:95:40:20:7d:55:30:a2:
87:a1:bc:99:22:5f:5f:6b:8f:28:14:fe:d3:3d:e3:e1:c9:52:
bf:88:21:ae:d7:25:d5:8a:6d:fa:fb:88:36:03:d5:9a:09:2f:
1e:74:5a:1e:12:59:58:44:d5:70:e9:cb:a9:6d:dc:5e:85:b1:
5e:57:74:ef:14:5d:ae:5a:4b:9c:3f:e6:84:3a:52:45:03:54:
37:fa:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:48 2025 by rpki-client