Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
File: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer (raw, json)
Hash identifier: 6VysoSo1vVm1lzssDVocvR726UscagzLyux7woUydaU=
Subject key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Apr 2025 01:16:17 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 152.98.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 13:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25533 (0x63bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 3 01:16:17 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9189396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:9c:64:09:23:06:53:e8:5c:7e:5b:c3:88:
35:dd:8e:c6:fc:66:98:c8:ce:10:8a:ef:86:82:ee:
ca:a6:55:95:af:7a:93:3b:e0:f9:d8:28:5a:16:c6:
21:1e:42:4c:cd:e2:cc:d8:a9:81:f6:1d:c0:ec:b9:
9e:2e:a4:8e:21:c2:16:2d:fd:59:81:f4:92:2c:e6:
84:40:63:61:d0:20:71:e3:91:51:45:c2:7b:d1:fd:
80:0b:d3:11:dc:d0:f9:2c:d1:2f:19:36:29:e7:3c:
23:df:8d:6e:45:ee:a5:12:db:a4:c8:86:bb:05:ce:
5f:22:f5:d5:97:0b:03:73:a3:d9:01:08:ea:ae:d1:
c0:a1:4c:cc:0e:6c:00:00:16:ed:53:3c:dc:4f:c2:
6d:e0:87:94:6f:e4:af:e5:fc:de:b8:02:cd:33:31:
a5:08:d8:a2:e6:34:4d:49:b7:a0:e4:66:69:79:df:
2d:3a:46:ef:38:03:6c:ee:22:4b:de:fc:88:e5:52:
70:b2:9f:be:77:07:a4:2d:cd:8f:c7:05:0f:dc:4e:
d1:63:6c:09:28:52:21:03:b0:29:9f:86:00:88:b4:
42:e6:78:77:b3:64:47:12:5c:2c:11:fd:39:f6:a0:
ac:b7:e6:80:09:af:71:3d:d4:01:44:cf:63:3d:c0:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:16:71:02:ef:d8:b3:23:39:b2:8c:42:8e:c6:06:29:36:d1:
88:d4:67:70:c6:6b:da:75:60:e1:95:96:a8:85:2b:6c:ea:e4:
f8:a5:db:5b:c9:34:a5:75:ad:d5:cb:f0:ae:6d:0a:1c:72:2f:
c0:68:0b:4e:01:55:65:5f:0e:40:f5:d9:2d:40:00:f3:ce:6c:
47:f3:98:67:95:20:e0:92:c9:f4:2a:0b:97:fa:74:04:e5:89:
1d:c5:92:b7:36:6a:46:25:3c:1e:a5:ff:04:a1:79:c4:a3:97:
f9:ca:0b:78:33:41:52:97:e8:a4:6d:e0:d5:e4:07:5f:61:c2:
38:02:53:d6:32:18:9e:71:21:60:fe:e0:d5:25:a5:17:b0:63:
68:16:26:1a:94:29:65:0a:b4:d1:b9:fc:b4:8b:76:1f:ed:2c:
54:df:34:5e:93:7f:47:fb:c2:78:10:be:b4:a2:0f:dd:f2:16:
0c:ae:4d:12:b8:8c:74:5e:fc:9d:97:2b:38:e2:91:0a:fa:2a:
36:18:45:1e:94:e1:1b:bf:f2:ea:36:fd:25:52:5d:83:ea:5b:
e2:6c:c2:ae:eb:f2:17:f5:28:46:3a:3b:25:ef:de:41:52:62:
ec:8e:a5:15:8f:b9:23:7e:78:35:0c:55:a1:4f:e5:d5:9b:aa:
5c:5b:ca:e9
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICY70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNDAzMDExNjE3WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4OTM5NjExMC8GA1UEBRMoRUY4NUFFRkM3QjA4MTRERjNGNDEwREEw
MUNBMzRCRTRENjZCQjFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL2rnGQJIwZT6Fx+W8OINd2OxvxmmMjOEIrvhoLuyqZVla96kzvg+dgoWhbGIR5C
TM3izNipgfYdwOy5ni6kjiHCFi39WYH0kizmhEBjYdAgceORUUXCe9H9gAvTEdzQ
+SzRLxk2Kec8I9+NbkXupRLbpMiGuwXOXyL11ZcLA3Oj2QEI6q7RwKFMzA5sAAAW
7VM83E/CbeCHlG/kr+X83rgCzTMxpQjYouY0TUm3oORmaXnfLTpG7zgDbO4iS978
iOVScLKfvncHpC3Nj8cFD9xO0WNsCShSIQOwKZ+GAIi0QuZ4d7NkRxJcLBH9Ofag
rLfmgAmvcT3UAUTPYz3AaCMCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBTvha78ewgU
3z9BDaAco0vk1muxozAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODkzOTYvM0I4RDc0ODgxMDI5MTFGMDkwMjIyNjNEQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg5Mzk2LzNCOEQ3NDg4MTAyOTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJ
Rk44X1FRMmdIS05MNU5acnNhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAJhiMA0GCSqGSIb3DQEBCwUAA4IBAQACFnEC79izIzmyjEKOxgYp
NtGI1GdwxmvadWDhlZaohSts6uT4pdtbyTSlda3Vy/CubQocci/AaAtOAVVlXw5A
9dktQADzzmxH85hnlSDgksn0KguX+nQE5YkdxZK3NmpGJTwepf8EoXnEo5f5ygt4
M0FSl+ikbeDV5AdfYcI4AlPWMhiecSFg/uDVJaUXsGNoFiYalCllCrTRufy0i3Yf
7SxU3zRek39H+8J4EL60og/d8hYMrk0SuIx0Xvydlys44pEK+io2GEUelOEbv/Lq
Nv0lUl2D6lvibMKu6/IX9ShGOjsl795BUmLsjqUVj7kjfng1DFWhT+XVm6pcW8rp
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:22 2025 by rpki-client