Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
File: votHM7Guikc2t-kTJzPWVAkePSs.cer (raw, json)
Hash identifier: iEPbbX0KKylPRKH85zXv2mmF8vBmpromgXjXjuOxPdo=
Subject key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6033
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:51:47 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24627 (0x6033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 3 12:51:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91B23D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:35:03:00:dd:8a:28:b0:60:eb:7b:d2:f0:
ab:6a:5f:05:91:53:41:7e:2c:55:bd:20:67:66:38:
d7:3e:f3:c0:fb:0f:51:2a:d9:34:da:0f:52:79:66:
69:61:12:ed:1c:98:30:4c:3b:6b:98:fd:01:ea:9c:
88:75:5b:54:f5:c3:6e:e5:62:87:fe:37:02:0d:e7:
44:b1:f9:55:1c:76:1a:3d:b9:07:af:d8:d7:c1:2b:
09:c2:be:39:cb:1b:3b:1a:42:cb:28:a6:b5:04:5c:
56:3c:19:00:d8:65:36:2e:74:ec:4b:5f:17:2a:d7:
9a:fa:2f:f1:b4:c1:0b:da:70:95:92:f5:0a:dc:d6:
f6:72:6d:53:aa:aa:78:b8:f0:92:f1:bc:10:22:8c:
b3:fc:01:a5:e2:e0:57:59:e1:b7:77:83:65:a6:04:
21:30:0b:ab:e4:2b:96:a0:d8:b0:61:09:af:6a:66:
28:bb:a9:e8:9e:ad:cb:f9:d8:db:bb:50:2d:f4:32:
e3:fd:97:34:58:6a:1a:c0:8b:81:f1:5c:68:4a:ea:
6c:dd:5f:1f:b7:a2:b0:62:b7:ad:bc:d8:58:b0:3b:
1d:d4:7d:44:e7:ad:2e:1b:4a:0a:91:4b:de:52:e9:
70:a4:df:67:45:4c:e9:fb:36:10:eb:00:b6:01:6f:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:5e:3b:c5:0b:b5:27:df:31:73:3c:98:86:64:49:9e:2d:2f:
cf:de:85:7b:3b:e5:d4:c4:1c:56:b6:db:d7:d7:3c:c2:6e:22:
0e:dc:e2:91:a6:2b:db:e8:05:cb:81:45:a0:a5:16:75:ea:1c:
df:a9:5c:89:80:12:68:09:37:e1:1f:70:e4:d0:3d:97:06:3a:
ad:7e:bc:2d:f1:9b:f9:e6:35:c1:69:1f:7c:42:d3:95:47:21:
f2:6a:2f:db:bb:69:77:05:51:2e:78:64:b7:f6:39:d7:d7:c7:
87:b7:d9:37:39:57:55:49:d5:79:a3:e0:b9:44:1b:66:ec:a6:
a8:6d:8d:53:cf:7d:7f:36:c9:40:e5:8b:de:8d:08:0c:1b:93:
57:1f:83:5e:2b:3b:f6:40:ba:2c:8a:b9:58:52:50:0c:6b:ca:
88:4b:ab:ac:63:49:06:c9:bf:d7:22:f6:b0:a8:53:bc:cd:68:
f7:41:56:71:31:9c:5b:34:8f:56:b4:af:b4:e2:16:0a:6c:64:
c9:88:68:94:93:9c:1c:20:cf:c2:89:9a:32:02:56:63:a4:ab:
44:85:0c:4b:67:3a:ac:70:43:db:83:a3:5c:f6:ee:a4:b1:7e:
7d:62:9c:24:c1:78:19:1c:9c:e8:43:83:22:6c:e8:29:39:5f:
08:80:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:07:04 2025 by rpki-client