Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
File: iil-A1bw979U3vVrJaH7Hq-EhD0.cer (raw, json)
Hash identifier: oCDLhFYOXsxB0eN61hfu33TsfthTOMS6TaJFXZw/zeM=
Subject key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 28 Nov 2024 17:07:04 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 2001:df1:6ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Mar 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138836 (0x21e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 28 17:07:04 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A919EA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:ab:b1:27:da:92:56:72:28:0b:04:d5:1d:
b9:5c:5a:fc:82:94:cf:86:b6:46:bf:9c:69:c4:f5:
a9:82:03:db:44:d7:c0:ac:c8:88:09:95:2a:d4:ae:
18:cf:a5:1f:bf:5e:95:43:f4:bd:e0:df:01:83:19:
da:2f:08:70:6c:60:e2:f4:4e:9d:00:f5:26:e1:ea:
03:87:4f:a9:9a:e5:46:01:df:fc:5a:02:1f:3c:25:
19:a1:83:8a:42:65:b5:9a:09:d5:19:0b:71:bb:79:
cc:5c:3c:6a:7e:d3:e4:13:90:a0:c4:d7:4b:74:c0:
5a:1f:a7:e2:44:25:ce:9e:f8:9a:75:f0:95:e2:60:
33:aa:82:26:55:00:a6:bc:8d:34:c1:b2:98:3b:4f:
36:c7:76:80:dc:26:3f:b4:5f:81:9f:b9:94:9c:32:
f0:da:85:2c:5b:4d:48:6e:3c:4c:b1:08:32:a7:50:
3d:15:2e:47:5c:69:10:f6:97:1b:15:0c:9c:ba:af:
36:9b:ba:6e:fb:4d:d5:42:4d:46:60:7e:df:5a:79:
e2:1a:df:77:f6:99:e7:89:43:81:21:1b:fc:40:2f:
a0:0f:b0:4a:de:0c:5c:b8:42:b1:4f:8a:c1:fd:36:
d7:fd:86:c7:f5:73:98:3a:4f:c7:4c:cb:2e:c9:48:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6ac0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:04:37:bd:3c:b8:ac:dd:41:2e:3d:62:64:ae:d4:4e:e5:3e:
55:0c:6c:27:f9:7f:7b:97:07:bd:11:ec:0f:cf:65:b3:6b:1e:
8e:a5:f5:5b:98:dd:a7:6e:42:25:6d:39:80:7a:a0:59:40:39:
30:cd:31:2c:c5:3c:9c:3b:b6:df:68:2c:37:f2:06:fe:fb:a4:
e3:88:cb:9f:69:38:e3:08:56:f0:cf:9b:f2:63:43:e3:61:5f:
0b:6d:f2:df:ab:f4:ad:50:48:89:89:1e:bb:ed:a4:3f:b3:9e:
cc:c8:19:11:dd:e8:ef:ee:7b:4d:cb:bb:2a:df:a3:04:b0:27:
f1:26:f7:c5:ca:90:87:0b:10:03:38:03:ec:80:f6:d8:6a:5e:
ec:50:9f:1c:3b:10:55:28:2b:73:63:33:04:99:5c:51:8e:ee:
10:f1:ab:3b:b1:9d:65:ed:d9:b9:82:01:a5:ea:02:e5:c1:f0:
db:2e:1c:61:3a:48:5f:1f:14:1f:f3:79:24:8c:48:d4:d2:73:
f3:70:77:be:ad:68:27:e4:41:82:1a:8b:b4:6b:0b:5e:f7:4d:
a9:62:e1:6a:86:ef:60:7d:d6:99:c6:7b:0a:5a:e0:b8:d7:9d:
47:bc:67:8a:1c:2d:37:12:8c:3f:2a:36:c6:1e:42:52:68:a3:
56:a7:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:06 2025 by rpki-client