Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.cer (raw, json)
Hash identifier: 7ihZmju0VMJ1gOHw8Ge8DA1gXig3UToh1SjSw5MzG7M=
Subject key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F6D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Dec 2024 00:25:55 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.224.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24429 (0x5f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 17 00:25:55 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A911F753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:ab:35:61:61:ca:09:86:2b:0c:0a:a9:2e:
9b:af:cd:d0:45:ba:37:0e:3b:f8:ab:61:b2:a3:8f:
1f:59:11:0c:a8:3c:ae:7e:40:20:42:ae:01:e0:dd:
95:81:86:a4:c3:ff:32:dc:2e:ce:bb:18:ec:98:38:
91:b7:74:d1:b6:07:9d:ae:2d:c3:9d:81:df:cc:60:
76:78:2d:c0:f6:76:74:7e:95:7f:e0:00:5f:7f:25:
83:c9:8c:3c:87:6c:87:d8:65:f8:a1:f0:a8:ee:ae:
a2:c3:3e:e8:97:ef:d2:cd:6e:fb:9d:91:15:65:45:
e1:b6:38:1b:1b:32:18:f8:d1:61:b4:46:69:47:54:
1f:57:12:d8:f8:2c:bb:60:fe:8b:f7:6b:58:81:2c:
00:91:bc:0e:be:61:c9:84:0d:06:f8:f7:67:c0:e2:
e8:35:03:70:f2:57:13:2b:f3:e9:d5:a0:d7:19:ac:
94:b7:4e:b8:69:6f:d0:00:8f:c9:24:5c:21:69:2d:
87:a4:03:5d:0e:66:34:9e:d9:04:8b:4e:97:c8:72:
05:40:d7:ba:b6:c2:e9:99:b2:af:49:8e:0b:c0:ad:
9f:e9:3d:a2:a1:c2:ff:cf:8d:9b:a8:b4:a5:c0:73:
1a:82:86:e2:85:e2:3d:92:a2:f6:10:26:93:e5:b0:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.224.0/23
Signature Algorithm: sha256WithRSAEncryption
24:45:dd:f5:05:18:9f:51:7c:8b:16:bc:7b:88:90:5e:24:aa:
f8:a6:13:a0:53:55:be:78:b4:95:e7:c8:59:f3:b7:7a:23:2e:
f2:aa:47:e3:0c:c5:94:b6:0a:72:e5:cb:46:f3:17:d5:35:76:
f8:1f:80:e3:f4:03:11:13:59:d6:c4:32:64:ad:8e:10:c6:22:
4c:ec:d8:fb:16:c3:ed:b6:66:f1:e2:90:5c:1b:2b:e9:58:3f:
99:e6:09:dc:80:b0:bc:2f:9b:31:79:8d:37:ce:68:9f:a1:07:
44:04:ac:8a:ad:31:48:35:d4:e8:84:b3:30:c6:4f:5e:d1:e8:
21:ca:a0:03:e4:95:94:0a:ab:2b:d9:f7:b9:42:24:d2:bc:29:
06:6d:40:01:2a:38:90:ed:d4:90:ce:8a:4b:ed:ec:0e:56:66:
1c:cd:b7:bf:60:ad:6a:64:47:df:cb:af:47:6d:6a:bf:f9:b9:
43:e1:57:35:29:6e:b1:48:ac:59:14:f2:de:61:e9:f4:66:ed:
8e:0e:1b:3e:8f:3f:2d:07:cf:fe:5e:2f:e2:69:01:c2:ca:1a:
c4:65:1d:fb:b7:a8:03:ba:36:ed:e9:86:de:bd:83:03:62:17:
7e:8e:5f:bf:d3:31:d6:26:84:2e:fc:94:e8:03:39:8d:18:81:
a2:1d:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:38 2025 by rpki-client