Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
File: OQo4N6umkSos8p5hDaSVVd8sb6U.cer (raw, json)
Hash identifier: kALT3E37nFYG9TyGy6Z9gYNflkpNZhtguWSoTttWItA=
Subject key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6043
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 05 Jan 2025 11:40:36 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24643 (0x6043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 5 11:40:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91982B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:70:96:e9:17:0c:a9:64:47:91:d6:2e:03:
92:6d:4c:c9:df:82:8c:7a:bc:1c:32:8f:0d:54:3d:
bc:ad:07:e5:62:d0:45:c1:29:f1:a7:85:38:0e:cd:
fc:bb:be:42:60:9d:f9:81:c2:b1:76:f5:55:eb:7e:
a3:8e:da:58:61:04:42:ec:be:3f:05:cd:2c:d9:de:
89:45:67:71:63:63:e3:c5:9e:3a:d4:78:da:51:97:
27:16:a3:12:23:7f:63:4d:d2:3d:81:7c:29:45:1d:
f9:df:b0:2c:a2:6a:6e:6e:c9:8e:af:32:a3:eb:ef:
ad:08:7f:56:f6:aa:3b:39:28:1a:13:ed:ec:f4:81:
55:75:73:24:60:cf:32:5a:a2:d6:ca:15:5e:79:a3:
6c:d3:90:98:3c:54:07:d0:3c:f8:00:7a:e6:a8:f6:
a8:3d:95:22:12:e0:e0:a0:33:4a:87:d8:06:a1:f8:
e2:45:21:ad:d7:10:20:cb:f3:ec:08:e8:3e:0a:61:
a7:0c:34:7b:1e:e3:09:6f:fb:09:6b:0f:59:3d:56:
4b:ad:ec:a2:2b:80:49:9a:98:bb:9a:53:1c:67:df:
3b:65:45:ba:3b:ce:4d:b7:19:f7:d3:db:82:34:3d:
25:1f:6e:25:9e:86:14:9c:1d:a1:37:ec:e9:c1:bd:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:9f:12:89:f9:9a:27:57:1f:1c:b3:73:0f:4e:a5:62:dc:70:
2d:e3:9a:53:9b:ba:4e:27:72:d5:07:ba:10:e0:4d:92:13:3e:
ef:43:36:15:e6:07:de:24:8d:45:6f:38:dc:5d:f8:84:f5:60:
8a:fc:8a:ce:a9:2f:bc:96:26:97:ad:8a:dd:18:a1:06:53:62:
8e:22:ff:51:e4:ff:30:2a:ac:dd:de:44:64:6c:78:e4:8c:20:
ba:ea:1c:e3:49:92:52:f6:31:2a:e4:3f:7c:f5:2a:46:61:b3:
af:f9:95:0f:df:31:77:85:e1:8c:32:58:d8:33:7b:6a:29:e5:
52:37:e4:fe:98:62:29:f2:a1:f5:9d:63:ad:6b:10:dd:22:09:
1f:a6:e4:19:09:9b:d1:c5:f4:67:12:80:a0:96:19:7b:c9:81:
3d:93:df:df:53:0b:ee:2c:20:29:e6:d9:47:b7:a5:89:01:74:
c0:1a:29:da:2f:13:99:60:fc:3f:c1:a1:04:fc:05:c3:ee:85:
0f:2b:8b:50:1a:70:e8:70:d7:fe:3e:ee:2c:2e:2e:22:0f:29:
ab:1e:6d:0f:40:97:0b:ce:07:62:aa:87:e6:78:96:ae:34:00:
91:88:7c:93:f2:6c:6b:81:26:ae:02:a9:5b:41:95:ed:7d:ff:
6c:48:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:15 2025 by rpki-client