Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.cer (raw, json)
Hash identifier: cWgR0cMUHjFFv5SGRlRxEHNTXfF3t5NuEAAilyQR6gA=
Subject key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6116
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jan 2025 12:38:07 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24854 (0x6116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 17 12:38:07 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91E5EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:0a:cb:05:39:a2:52:85:e6:66:dc:3d:e8:
83:3b:e1:28:61:db:40:dc:7f:be:ac:7b:35:bc:36:
64:ec:c3:90:fb:ff:f3:2c:0c:dd:9b:f2:eb:c9:9f:
11:69:12:ab:45:41:a6:ca:1d:78:30:78:73:9b:0f:
fa:1d:6a:06:05:5e:43:4e:23:66:e1:e4:9f:2e:a2:
40:42:ce:97:cb:c7:64:71:b1:89:91:a9:aa:6b:48:
99:a5:12:9a:00:dd:e8:c5:e1:5a:22:32:77:cf:60:
33:57:6e:b7:5f:ef:34:01:b0:70:8d:2b:cf:14:62:
4d:a4:52:cc:64:01:07:d2:fc:f3:83:ae:81:9e:72:
28:12:e5:2f:a0:59:53:e3:72:37:22:46:aa:0a:ad:
58:bd:9f:bf:00:99:e5:75:eb:59:4e:a3:cd:c4:c8:
69:0d:54:3b:a6:59:40:32:6a:89:ae:8b:16:c7:73:
b9:ac:92:d5:79:40:3a:19:cc:7e:6e:cd:bf:eb:d7:
aa:95:6b:be:72:2e:b1:ee:c5:0c:7a:76:51:25:c7:
2e:09:f2:e8:d9:5e:bd:66:74:b3:ee:f1:32:62:d6:
70:03:fb:0e:af:49:5f:9d:4b:2e:05:ef:04:82:75:
07:d4:1d:20:3b:8a:e9:84:b4:ca:c6:98:4b:2f:df:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:ed:72:5d:48:ea:25:14:b3:fc:66:1e:d2:ca:67:3e:be:04:
f9:65:f2:e1:a9:0f:6c:3a:d8:b8:6c:b6:c2:a9:d1:cc:ec:2e:
46:65:56:9e:ff:23:f0:66:11:dc:07:1a:c0:25:77:78:25:3f:
b4:85:28:81:bc:6d:3f:9a:5c:cd:f3:0d:00:29:cb:6d:14:c4:
6b:53:90:81:fb:86:4e:04:85:7e:1d:7d:44:c3:08:c6:0f:ae:
a1:ba:f8:80:18:d9:24:ba:f4:7f:59:de:6c:dc:95:0c:f0:c8:
0b:35:50:69:23:fb:ab:18:30:58:48:89:2e:a0:ce:4b:4a:c5:
eb:f7:e4:18:5f:20:48:25:cf:61:73:d1:90:99:81:5f:08:f8:
44:ab:73:a5:d9:60:97:b1:91:d9:eb:93:63:fe:7c:72:e8:ea:
1f:d6:81:e7:41:c3:95:6c:14:0c:4c:c3:63:13:fc:12:ab:88:
72:4d:29:ba:30:4b:10:b3:1b:69:41:cd:40:b0:e1:63:d4:8c:
82:12:83:53:44:70:b4:a9:03:a1:36:9f:a0:82:28:65:f2:fd:
d6:3f:c4:66:22:d1:b5:b4:56:98:0c:64:f3:64:bf:ad:fb:ff:
37:ed:67:29:4b:bd:84:b2:fb:e8:7c:67:1a:16:f7:d3:d1:3b:
bf:af:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:46:37 2025 by rpki-client