Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer
File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer (raw, json)
Hash identifier: uWRAwYZMbL8mECA7sy+Wj6kwvcq/tHwItUrQrCCsC1A=
Subject key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 49FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jan 2025 03:29:14 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 141.140.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 02:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18941 (0x49fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 22 03:29:14 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9146251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:61:75:ec:92:21:87:92:b4:9b:92:25:ea:
10:1c:ab:d5:fa:63:fe:ed:d9:2c:3b:4c:cb:ff:87:
74:c6:f7:8e:ac:6b:fe:34:7d:6f:0c:80:d3:03:90:
56:a5:9c:1e:03:69:81:3a:6b:27:d7:ee:ac:98:5e:
10:02:66:07:15:27:dc:f3:64:d6:0a:72:37:03:48:
b6:26:ce:40:aa:6c:b8:55:ff:05:6e:01:04:b3:f2:
69:a0:a0:4f:03:3b:e9:a2:df:03:7d:e4:dc:1b:3a:
08:61:df:13:d9:d7:6e:95:dd:76:81:a0:c6:b1:3a:
0f:c0:c9:29:42:8f:73:8e:38:8f:0d:86:75:54:1e:
d2:58:e6:f3:59:21:f9:93:36:e0:17:eb:6d:a2:15:
c4:16:45:2c:a4:1f:fb:c0:83:94:6f:ac:53:75:46:
4a:e7:0c:43:64:d5:a9:c1:40:98:fe:db:17:3e:c4:
ef:9e:68:39:d0:b5:3e:a4:4f:a6:e5:9d:86:f4:3e:
58:e8:85:5a:15:2f:b6:87:22:a1:07:10:0f:d6:6a:
7a:a7:40:d8:88:54:3d:87:95:82:56:60:18:d7:2e:
08:94:25:3d:93:1d:27:66:07:f8:9e:b5:27:76:98:
de:ef:f8:fb:fd:60:a7:cc:e1:0f:3e:16:7a:1c:9b:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
141.140.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:dd:b7:61:cb:e2:ad:72:fa:b8:86:b5:fc:f4:fb:c3:a6:8f:
af:0d:c0:54:74:ad:c0:c4:cd:f3:de:bc:96:7a:54:c7:7b:45:
84:4b:f7:a2:ae:80:82:46:88:e5:41:51:43:ae:cf:41:56:79:
b8:65:af:dc:c1:5c:5a:42:66:58:ca:bb:b0:3c:bd:7b:4f:9d:
41:2d:b6:ec:0c:2d:7f:e6:14:74:f5:e5:3f:f4:aa:c4:56:d2:
73:ad:8a:fb:af:f0:71:65:d8:53:80:aa:26:d7:c9:fb:4e:62:
29:d6:37:65:b0:4e:3e:07:82:2d:d9:f8:48:d0:7b:8e:68:4a:
dc:16:28:ae:ac:6b:c1:59:5a:64:67:61:29:f6:f6:ce:8b:41:
ea:81:9e:55:84:ea:6e:82:2a:c1:b4:bf:9d:96:c5:30:5c:a7:
a6:b2:c3:07:7d:53:b7:16:8a:09:22:f9:af:25:53:b3:a5:3c:
a5:c8:72:5d:64:61:26:7e:37:1a:4e:19:d8:ca:91:69:d1:b7:
11:0e:b3:36:a2:a4:8a:15:d0:30:5b:0e:05:b0:02:e0:51:a1:
38:39:d1:43:53:b8:d8:c7:b1:0b:50:28:5d:9b:e1:f6:ce:04:
d0:57:df:cc:5d:9d:b9:b5:e9:7c:be:b1:9c:73:e7:6e:49:15:
32:b7:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:57:04 2025 by rpki-client