Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
File: lAiiAfAOWP6SWY7gOTkHi673d5U.cer (raw, json)
Hash identifier: 19phrScOedbumTv1gQTAdvG5mIEcdc7ZwwykGs3MsVg=
Subject key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4A24
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 15:49:08 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 50049
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18980 (0x4a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 15:49:08 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91A6F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:6f:e8:81:2d:a5:9c:cc:d8:32:5f:fd:5b:
bb:29:fe:16:55:f6:91:6c:17:a1:b0:90:6d:bc:5f:
6d:cf:ef:46:d0:97:f5:45:7a:b0:29:cc:a3:e0:59:
52:0e:51:c2:53:81:4f:7a:6d:d5:bc:87:12:ca:b0:
9a:a8:8d:fa:b9:eb:0b:e6:33:e1:15:41:16:1a:34:
cd:dd:53:a1:6d:fa:bc:a5:88:be:65:30:20:63:f2:
11:f2:0a:72:c1:93:ee:d5:e1:dd:db:58:6f:98:8d:
0a:ba:1a:f2:23:cb:7d:9f:0e:96:1d:4a:03:e3:9d:
29:8a:de:ca:c5:92:63:0f:94:a9:4c:db:c0:06:a1:
51:0f:28:5d:e3:57:43:a5:0b:1a:68:67:be:9a:c9:
f7:09:91:bb:e9:5a:42:93:14:b1:41:eb:68:b2:b7:
77:d3:d3:82:c7:81:88:68:7e:a2:86:c2:ae:ee:d9:
70:b1:9e:17:62:5a:ae:a7:69:34:03:86:fb:56:e2:
43:40:1a:87:fa:50:e9:7a:47:ca:6f:66:d3:a5:81:
b1:da:e6:1b:24:e3:84:f6:10:bd:16:c8:70:9b:8b:
93:70:94:24:5d:52:0c:a7:ba:dc:1f:fe:ad:65:9a:
99:02:fe:45:15:4e:a8:c6:c2:4c:37:3a:4c:9f:b7:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50049
Signature Algorithm: sha256WithRSAEncryption
4b:b7:46:a0:5e:78:9f:32:67:fe:a3:91:9d:43:c2:fb:07:c0:
10:39:c2:31:fb:fb:f8:52:02:20:0a:51:28:63:ba:30:a3:5a:
35:f1:76:5b:c0:0e:c2:b9:7e:32:e7:74:17:2a:bd:ab:ad:48:
b5:3a:37:0c:0d:5f:a1:6f:f3:53:d6:e2:64:72:ca:18:2d:85:
0c:a1:8d:bf:8d:7a:14:a8:91:58:3b:9f:21:2c:aa:df:16:7a:
67:93:b7:a6:a4:12:76:d5:5b:b9:8b:09:cd:34:20:45:35:14:
47:e9:54:09:c8:c9:cc:f6:20:1f:70:8a:8d:27:45:a5:e8:c0:
04:af:9c:9e:64:4a:57:4b:25:9c:fe:87:14:6b:87:4d:73:63:
e0:98:38:bb:c6:29:7a:e6:1e:7f:2d:cc:51:e2:7d:09:94:c6:
19:e0:8c:76:fa:43:14:8c:0c:3f:cd:cb:81:d6:fb:3d:bd:e9:
ef:37:7f:2e:c5:8e:f6:53:8c:ec:3c:f4:19:49:0b:9b:9f:6c:
67:e3:5f:82:f6:2b:2b:75:c8:42:fa:60:ee:5f:11:00:5d:af:
f5:f9:e6:f2:4e:fa:be:45:8f:99:af:c5:3d:26:40:ee:41:a8:
b0:bf:87:8b:43:c7:1b:7e:69:97:83:ae:89:ec:54:1d:12:40:
bc:9f:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:42 2025 by rpki-client