Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
File: O6JVjKXxoDfZaW9WeugTZ8buNeY.cer (raw, json)
Hash identifier: rxVD3eH3BP+R4+XGct3uUCCH4V4xV4lqm984EAN1DC8=
Subject key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6114
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jan 2025 09:59:13 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.200.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24852 (0x6114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 17 09:59:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91C022C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:fb:02:0b:4b:49:da:00:84:cd:2b:52:24:
61:0e:79:3d:a9:66:0f:b2:c8:6b:9a:17:43:e2:fd:
b2:64:e6:17:13:59:9d:b3:41:36:f1:62:64:58:6f:
62:ec:fe:d3:d1:47:1c:d2:e2:5e:fc:f8:18:c4:ef:
ec:f8:2d:30:7a:32:98:e3:97:70:46:98:e6:cd:93:
02:8a:6a:44:3e:57:ec:f5:de:f7:c8:42:99:e3:ec:
e9:6c:e0:9f:b3:6c:33:97:10:1c:b8:61:84:6f:f7:
e1:cc:81:c1:86:1d:ce:21:af:b0:86:1f:33:9e:81:
3c:e2:62:2f:1b:33:6b:5d:34:8a:66:c0:fc:ee:7f:
51:81:1b:6d:c8:e7:fe:da:b1:e0:63:ab:cd:62:f1:
dd:87:18:85:4a:8c:54:d5:5a:1e:61:11:8e:5d:45:
a8:24:c9:d3:0b:da:34:87:d8:2d:35:34:83:47:84:
10:93:f5:88:e3:19:75:bc:75:0f:a0:4e:90:2a:f0:
06:fc:81:c9:2d:cf:67:60:89:a9:fa:04:76:a6:58:
97:03:04:c4:68:33:6a:d4:48:62:7f:e6:70:0f:1a:
69:67:ee:02:eb:42:7c:fa:db:5b:0d:2f:54:31:79:
51:cc:b9:12:24:5d:b6:27:a0:9e:2b:e3:69:a0:51:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.200.0/23
Signature Algorithm: sha256WithRSAEncryption
90:5d:74:1e:a9:07:2a:07:26:73:55:00:50:91:fb:82:d7:fe:
56:e9:1f:7a:a9:7c:7d:63:8b:78:61:1a:e7:9f:db:38:3f:6b:
0b:8c:4d:d2:e5:76:af:9e:20:fc:40:e5:ca:97:3d:a7:84:f2:
e9:13:2a:90:6b:77:cc:a8:05:ba:b2:94:c5:09:a9:ee:52:c5:
5c:20:cb:60:68:0a:65:6d:fa:54:f1:41:97:90:29:7f:a8:87:
20:ee:58:af:ae:b3:36:c9:e9:e4:bf:a1:de:76:d0:8b:d4:81:
06:8a:e1:50:ca:5e:55:e3:10:f3:3d:7c:4f:39:c9:bb:33:d7:
0f:ba:e4:55:79:79:bd:7c:2f:30:0f:4d:99:63:8b:4b:cf:9d:
2a:27:3c:02:06:de:70:a6:8f:00:f0:63:9f:f7:70:9e:a6:a4:
5c:0d:4c:d4:7c:97:02:17:45:2d:fb:bf:96:79:82:05:4d:9e:
49:bf:5e:1e:0d:33:00:72:79:a1:8f:fb:7f:c0:8b:5a:50:19:
b4:68:44:fe:79:ce:54:79:f1:b7:49:fb:ff:61:e0:ad:ab:5b:
a7:e1:9d:51:17:2d:6f:54:33:cb:19:fc:e2:ab:44:78:00:83:
87:a9:e1:dd:6a:f7:a6:bb:76:3f:34:32:99:db:fa:ae:ab:90:
e0:85:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:05:59 2025 by rpki-client