Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
File: lddEZYkqyDm6JHn6BHVqXjBfJjw.cer (raw, json)
Hash identifier: UVIjtSx85bb/uNFVsAtJWnHY/TmDvfrnbie4x2+wpbk=
Subject key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5C99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Oct 2024 14:37:03 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 192.189.34.0/24
IP: 192.189.229.0 -- 192.189.232.255
IP: 192.200.64.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23705 (0x5c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 18 14:37:03 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:e2:c2:22:2a:21:21:91:86:c4:bc:12:97:
7b:1b:97:ad:6a:37:7a:1b:51:c5:cc:eb:ae:e1:52:
51:a2:f9:aa:71:47:ce:2f:c3:c0:40:43:36:9b:d6:
61:45:ea:4c:b7:db:5b:a6:6d:31:21:19:c0:eb:21:
cd:2e:c0:f3:28:03:8c:9b:76:6d:a8:cb:29:bc:5c:
18:75:8c:16:e2:a2:9c:84:e3:71:a6:2d:85:44:7a:
58:a7:84:8f:5c:df:1c:1f:1b:d7:83:b4:1d:74:18:
9e:5d:7f:32:bf:f0:20:69:a3:65:33:35:3f:f0:33:
b8:11:96:75:03:9e:20:cb:e9:7a:8a:f1:5d:26:bb:
cb:cd:3c:9d:53:50:58:c0:dd:e1:69:99:d0:35:1e:
79:75:b1:0d:08:31:c4:90:06:0b:7d:58:9b:af:f0:
2f:bf:9f:c7:a4:54:f0:22:81:aa:45:b0:02:bf:74:
ea:a3:76:42:09:39:1d:b4:44:c1:69:d9:6d:80:d0:
9a:bb:46:d1:08:e8:9f:6a:84:e8:7d:f8:86:1a:f4:
23:41:63:d7:e3:cd:7e:2f:96:4b:18:85:2c:4a:28:
9d:7a:7c:23:0c:32:e3:91:46:99:00:db:d1:3e:25:
52:39:e7:ad:0b:21:fe:d1:b2:cd:1b:0c:62:cd:0d:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.189.34.0/24
192.189.229.0-192.189.232.255
192.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:1b:04:fe:62:8b:77:f8:e6:ad:55:dd:65:66:32:69:92:cd:
fd:bb:88:14:ff:3a:e9:d7:83:f8:54:6f:60:45:04:fd:c7:5b:
80:f4:09:39:6f:dd:bb:54:35:16:e6:61:0a:7e:a3:bf:4a:5a:
ed:64:72:6e:bd:34:ed:09:e0:32:17:ac:e1:a7:c5:40:ae:0a:
01:1a:b9:02:04:f2:41:6b:8b:89:b4:ad:6a:9e:8e:ba:de:b0:
1e:53:35:80:bb:18:3c:3e:88:ba:cb:30:31:67:14:29:b8:41:
b6:2c:bd:2f:1f:dd:88:e4:e5:79:4a:d0:6e:88:63:a3:be:00:
1a:58:31:26:0e:42:d9:6c:e9:3b:08:84:24:7c:b4:c1:36:c3:
1f:15:82:15:4b:30:a0:0d:98:57:bb:0b:31:c0:a5:0a:cd:10:
ca:bd:61:d7:25:9d:78:c4:22:43:fa:59:f2:29:d0:fe:a2:4e:
14:1e:89:b7:d5:37:6e:fb:85:e5:5d:e2:f7:82:39:70:57:d8:
b0:e4:f7:97:18:d1:bc:58:91:5e:45:70:18:8b:32:27:48:40:
d4:b7:c8:f6:8e:ed:bf:61:8a:83:9c:79:74:1c:d8:74:be:2a:
6c:bf:74:8d:5f:9a:45:08:92:80:f1:bc:4b:4e:95:8c:eb:48:
99:b7:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:24:38 2025 by rpki-client