Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.cer (raw, json)
Hash identifier: Mb5QT/fnb+HMZkjZqJfPz+3IlSdBwzb1lOln95vmZtw=
Subject key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 603D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 05 Jan 2025 05:13:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.90.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24637 (0x603d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 5 05:13:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9156854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:e6:1f:2e:d1:9a:c5:f8:f7:77:09:65:60:
7e:83:8a:a0:48:f6:6e:15:34:f0:e2:17:27:ea:65:
c7:f3:74:e2:6a:55:d3:97:6c:bf:e3:8d:b5:e7:77:
ef:6e:13:b7:c6:61:a8:2b:54:66:c9:5a:47:0a:16:
10:8c:4b:d4:fe:2c:03:f0:b3:7c:5e:89:fc:3b:a3:
7d:78:b9:94:27:e0:73:74:4d:2b:da:c0:0a:aa:c4:
79:6d:7d:19:9c:a7:64:3c:69:97:ca:8c:8b:cb:52:
55:f1:26:05:09:85:04:2d:11:02:e0:34:00:5a:38:
78:6e:70:38:aa:77:75:a1:20:a3:32:ec:98:64:fe:
a6:d5:d2:f7:f0:b2:e3:8d:ab:cf:fd:d4:0a:fd:d1:
48:a5:9d:84:db:01:b5:37:5b:6f:75:52:d1:87:9e:
85:0c:50:bd:f3:f9:50:4e:3c:25:83:67:72:b1:73:
bc:1c:6c:01:d3:b2:0c:b9:ae:70:2d:59:32:67:37:
7b:f6:42:0c:89:10:e9:db:03:08:fa:5d:3b:aa:df:
12:8e:4d:f5:38:b2:38:72:6c:84:6b:92:86:80:c3:
a0:fe:b6:df:86:33:fb:d3:5a:48:a5:63:c2:5d:d6:
b3:d3:34:44:f3:a1:ae:39:f3:ad:1f:a3:14:87:7e:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.90.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ca:a3:2d:6f:f7:71:ea:b7:13:36:13:76:b3:ff:8a:92:03:
20:8a:7c:52:07:17:bf:24:55:30:e6:eb:2b:90:53:c3:5c:5f:
8f:4c:ae:13:28:08:0c:26:bf:69:97:de:53:5b:d6:a9:56:85:
8d:b0:81:16:e9:40:77:ca:78:c3:a9:dd:7a:61:81:39:95:50:
4d:05:64:02:19:b3:9b:e7:a0:15:ec:12:b4:03:65:62:aa:82:
db:41:12:97:25:66:43:0c:7b:43:bf:cb:82:e9:8c:b5:4b:08:
de:7f:b6:99:83:1d:cc:6c:3b:ad:9b:fa:c2:d1:5c:22:98:18:
a8:c9:e4:ec:c4:4c:d6:92:3a:b5:bc:05:4a:1a:90:ed:73:b4:
7d:9b:bb:bb:92:21:61:ea:73:af:ce:89:74:56:96:f6:59:2e:
97:d3:b1:72:e3:c9:4a:15:dd:02:54:2a:16:1f:a9:c4:26:99:
08:bb:e8:36:6c:06:40:56:49:3d:67:c3:1f:19:db:38:f3:8c:
09:7e:67:b6:e7:3d:12:e9:94:23:85:02:76:de:3d:47:c8:9f:
bf:57:70:9f:17:13:4c:8e:25:34:43:fe:7c:dc:bf:e6:9d:02:
8a:14:73:2d:b3:51:1a:d3:5a:2b:e0:22:c5:fd:9a:8c:4f:f8:
bf:c1:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:30 2025 by rpki-client