Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
File: 0omLrZJnkc4JM8CSed-XmNfetpQ.cer (raw, json)
Hash identifier: JNeZWJHcXiOmT079eIcR3n0Yz7ItcrtJ13du/DqIYxA=
Subject key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6158
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jan 2025 12:51:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.106.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24920 (0x6158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 22 12:51:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A912AC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:3b:98:44:91:ca:10:17:8c:80:ee:83:69:
ef:68:c8:01:0f:19:44:88:15:5d:d1:af:d5:37:49:
ea:46:16:6c:38:5f:34:2e:8e:eb:33:c5:2f:7a:72:
91:a9:f5:3d:98:22:62:95:09:bf:0f:19:e9:f4:fd:
dd:d3:04:56:ff:d3:a6:9b:cc:86:63:1c:f1:de:bd:
bd:55:ef:f3:04:11:33:95:f1:87:71:07:04:41:3b:
5b:f5:d6:38:80:68:d5:53:f4:bf:90:bf:af:20:60:
82:b6:8c:04:24:03:b7:7d:89:d5:fb:68:c8:ea:28:
ae:b6:50:d8:d3:6e:54:db:b7:78:bc:c0:b1:32:04:
4c:0e:61:1b:25:25:35:ec:cd:41:43:3c:47:6e:7a:
3a:f0:d3:6d:24:55:c4:2b:e8:05:e9:9a:b1:8f:34:
01:ce:5e:02:5c:a7:ef:79:86:6b:4f:f2:e9:69:0b:
df:bd:ef:60:b1:6c:b2:0f:5e:0b:73:26:9a:d2:49:
fe:51:6d:8a:2a:99:12:f1:b1:bf:3b:37:41:09:ac:
f8:28:ad:6d:35:62:b4:f2:85:bb:5f:75:85:d8:ec:
22:b1:28:44:80:8a:24:f1:03:f9:f2:34:41:81:42:
e9:66:09:15:65:63:57:57:d7:d5:6f:cf:ad:b8:43:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:01:22:dc:5b:5e:dc:27:af:cc:4c:f5:78:be:d5:c5:6c:5d:
b6:a1:cb:fb:29:24:84:61:15:55:fa:f5:b8:9c:74:67:af:65:
86:f3:92:47:41:1e:39:56:0a:52:9c:85:f2:3a:0f:fe:32:9e:
09:30:f3:02:9e:73:c3:e2:8b:7b:0b:8c:e4:bb:1f:2a:08:be:
6a:fb:54:e9:df:df:a1:d0:83:1e:0d:c5:c9:3b:2e:73:ce:95:
00:18:57:8e:a6:28:35:1b:49:9b:ec:c5:7a:b3:7a:40:e7:a9:
2e:38:eb:1c:c1:38:83:77:cc:0a:67:71:ea:f8:f5:6d:d0:1a:
19:09:18:2e:bf:bc:94:a6:ea:a3:c4:b7:d0:82:15:6d:05:b5:
c5:33:52:49:5a:77:87:16:06:ab:53:58:41:a2:43:b9:bf:80:
fb:4b:d0:41:d7:4f:a9:f1:dd:f9:04:a9:a9:ba:81:d3:fe:31:
64:e9:fe:b8:29:1b:47:0f:a7:51:13:0b:50:bb:c4:78:ae:37:
a2:4d:8b:60:34:86:e2:94:90:1d:52:80:f0:34:09:90:fb:63:
8f:29:ea:60:05:f4:82:f7:fb:28:6b:98:0b:ef:98:64:76:89:
03:75:d4:53:49:aa:07:bd:00:5a:53:e1:fb:94:6c:84:2e:a6:
70:49:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:07:04 2025 by rpki-client