Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.cer (raw, json)
Hash identifier: 2sPxsZZPhCYSKLms0sAJ6eYWkuBDI9LTMKIc1WbYPfk=
Subject key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4ADF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 23 Mar 2025 22:59:44 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 86.54.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19167 (0x4adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 23 22:59:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:22:07:49:7c:ec:32:a8:24:48:3e:7b:91:
43:38:2f:5f:b4:60:83:ec:d7:2d:72:99:87:47:60:
7f:0f:31:65:c0:27:e8:e7:b6:67:cb:99:52:e9:a0:
a8:6d:0c:ce:a8:3f:32:6e:49:7a:00:98:c9:a2:4b:
82:5a:67:28:ec:8a:51:23:0b:b7:81:35:be:86:99:
6c:f7:a6:c8:07:31:58:bc:f4:aa:8b:af:01:bd:ec:
8b:fa:10:c7:fe:fc:34:d8:a2:c6:f6:4a:c9:5c:fb:
c1:71:d2:7a:5c:1f:2e:88:6b:7a:dc:56:5c:99:36:
22:b5:5f:99:34:d4:11:18:e9:cb:92:35:bb:88:41:
8f:9c:d4:6d:3f:4e:e2:f8:39:c7:57:49:05:57:f2:
a3:15:71:25:d6:27:69:10:d8:b3:8c:a2:91:12:33:
8d:79:9b:cb:a6:f6:93:96:56:06:59:fd:0c:db:8b:
26:5e:96:60:cc:c5:f8:28:c7:9a:e1:15:3b:da:43:
a0:ce:84:ee:eb:ca:39:46:db:ed:1d:da:44:d2:4e:
b3:2c:38:48:73:e8:06:28:16:34:54:23:94:d4:cf:
ef:80:3d:63:26:3e:af:7c:b3:86:ba:4d:ef:08:a1:
67:de:9e:e3:d3:77:8b:27:de:25:3c:e2:01:ec:c3:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
86.54.202.0/23
Signature Algorithm: sha256WithRSAEncryption
73:2d:64:47:61:78:32:52:c1:48:6e:64:98:72:a4:43:ac:76:
89:97:c5:d5:30:5c:3a:4c:66:ce:a5:9c:1c:e0:55:74:20:f5:
0f:0e:d6:7d:2c:b1:ca:c9:21:f2:f8:6b:25:69:3e:8c:de:26:
30:93:1b:d3:b4:97:aa:45:a5:71:71:d5:cc:43:72:7c:b8:af:
2e:5e:6a:2d:0b:65:10:b1:37:cd:a9:cf:0c:4e:09:4c:de:31:
1b:e2:08:29:7b:1e:df:cc:41:ae:72:51:fc:e0:ea:13:8f:0d:
91:ef:af:6e:06:0a:6b:ee:8a:04:c3:d5:23:a8:50:3e:e0:24:
a7:af:7c:78:7f:35:c7:0d:42:c3:67:1d:0a:0e:c6:e6:9f:bd:
70:5e:1d:77:13:de:8a:84:e2:93:13:f9:a8:f4:32:78:d6:09:
37:16:84:e2:c6:5b:8a:71:77:d3:b1:01:72:93:0a:15:86:a0:
ae:54:31:91:aa:84:2f:c6:ba:8c:07:cf:83:2b:48:17:6b:f5:
ca:49:5a:f6:42:7e:05:c7:15:6a:d4:45:df:dd:4a:a6:1a:97:
c6:53:52:5a:18:b7:37:5b:ac:3b:dc:de:e1:ce:da:30:52:4e:
b0:f7:47:6c:3d:2c:c2:26:4c:31:e4:cf:eb:b3:d6:c7:20:b1:
a2:d3:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:44:19 2025 by rpki-client