Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer (raw, json)
Hash identifier: kcDLmk24XZ9x4q1/DZLXUpCI87cu9dW5DnmA/VzQCuM=
Subject key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F03
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Dec 2024 06:29:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.176.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24323 (0x5f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 6 06:29:15 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A917D958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:35:10:ef:93:be:9d:10:9d:1d:25:fc:d0:
4b:44:78:dd:f1:b5:52:b4:a8:3e:ff:f6:f7:a7:5f:
d5:04:57:36:ce:9b:26:32:c3:97:a1:4e:42:88:a2:
fd:14:f2:5c:79:20:bf:76:5f:98:34:88:80:6e:1e:
f0:0c:1b:55:d9:55:9b:a3:48:4b:b6:7c:60:32:74:
a9:13:06:4e:ea:54:48:57:88:eb:59:b9:a5:be:72:
5b:09:42:39:19:05:ef:a8:85:df:ee:bf:9e:69:d8:
69:31:15:23:1a:a8:3d:42:9a:73:d2:1e:3c:f9:d9:
e3:7b:a0:1a:97:61:24:ed:04:c5:f1:86:d4:4f:11:
6e:87:2c:a1:94:54:8f:51:0e:43:13:d0:6b:a4:8e:
27:c7:5e:ad:5f:2b:8e:ef:97:cb:f0:b6:8b:0f:72:
a6:7b:b8:3f:1e:44:08:12:ff:4d:08:d7:c2:28:67:
6c:23:24:a5:ac:c5:b9:2f:78:61:76:77:d5:26:6e:
47:1f:c2:25:aa:04:36:51:fb:bc:5f:2d:f9:49:c6:
40:aa:4c:d2:e1:ee:ad:af:a6:b0:7e:6d:f7:85:e5:
e1:3b:e4:c5:79:bd:fd:83:f8:b8:80:55:23:b1:df:
5f:04:72:4f:08:8c:36:87:ad:5c:63:db:bf:21:9d:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e9:bc:97:cc:ac:90:4b:1f:92:1b:82:a4:18:a9:cf:42:bc:
73:7d:d1:40:5f:b1:4d:d2:a1:99:2e:a3:7e:b3:bc:a5:22:bf:
0b:a4:f1:95:1a:b8:a9:db:ce:8b:c9:3b:b0:35:05:42:19:98:
40:e2:1d:4c:ef:08:91:9d:51:4f:76:bb:30:09:b0:05:c6:e0:
01:28:37:e8:ca:bb:af:e2:18:44:4d:50:dc:e6:6e:56:71:8b:
01:10:17:5a:d6:4d:92:a3:2e:87:76:9a:92:c3:e6:23:77:55:
dc:61:06:af:e7:b3:5e:29:48:5d:04:1e:17:fd:a9:b6:b6:09:
af:54:ff:9d:e3:de:4b:40:d1:c0:a8:6d:29:12:06:02:53:4d:
03:30:db:e5:1b:ca:68:6f:dd:93:71:40:b6:f0:b9:23:8b:e9:
24:62:fd:2e:20:86:43:78:09:8d:1e:14:28:b2:27:22:38:14:
a9:d8:79:1c:e5:0f:ee:65:62:d2:aa:f4:d0:0c:77:51:a2:78:
05:90:73:20:a3:bb:39:02:78:c6:0c:63:9c:38:9f:b7:42:38:
ef:05:98:c1:42:41:6e:80:e7:9d:aa:97:75:ad:74:c4:ff:0b:
ef:22:02:28:54:13:c4:8a:6a:67:57:e9:b1:b3:e2:f3:7f:f2:
fe:6e:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:05 2025 by rpki-client