Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
File: tv1vS0-3wyR8WZKZsui6-1qLunI.cer (raw, json)
Hash identifier: NoEJ4v+FSm7bmPk3aHDH2WUvhNLfjGhvCxYUKv0ZDpM=
Subject key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4B61
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Apr 2025 02:51:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.193.0.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 May 2025 14:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19297 (0x4b61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 29 02:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:cc:26:2f:ff:e2:a1:08:f7:1a:af:4a:36:
90:3e:58:00:df:0d:c4:e6:28:19:c7:47:a7:db:ac:
88:1c:27:95:b1:84:15:95:73:28:3e:25:ae:dd:81:
b6:42:7d:67:6a:66:23:e5:78:97:c1:d4:57:0c:c8:
b7:05:60:c7:1a:32:b1:be:e2:68:ce:43:ac:4e:b2:
7c:a9:19:3b:d9:3a:d5:d8:5f:94:84:02:94:86:9b:
c6:1a:81:09:4f:67:a5:8c:b0:d3:bd:5d:c4:a5:46:
72:3f:34:b4:c5:03:c7:e8:ac:d9:34:73:32:63:b1:
91:e7:86:8d:79:35:f5:69:cb:30:d4:44:d4:48:4a:
2a:b2:98:bf:12:0e:e7:3d:7c:48:92:05:1e:e0:72:
79:23:6b:90:9a:e9:0e:4d:77:bf:d2:4b:66:5f:d1:
5d:10:4e:2b:85:a8:bd:e8:2f:58:81:1a:07:44:13:
9b:46:8d:0a:2c:dd:99:5a:e7:58:f9:51:12:1c:48:
9b:b5:2a:ab:74:86:bb:b2:92:41:f8:b2:b5:1a:95:
d1:36:0b:05:2f:64:15:14:f1:ac:c7:51:62:44:f8:
5c:e1:b6:aa:c9:92:d4:43:8f:b4:00:94:95:a5:12:
99:ab:cb:8e:48:e0:60:75:b8:9f:34:3d:f9:b7:35:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:a1:1f:b7:f3:a4:f5:a0:e5:be:bf:9a:10:19:01:b5:cf:82:
c1:71:e4:0f:1c:3e:a5:54:6c:d8:0d:46:0c:4c:32:e0:bd:cb:
6f:ff:ca:07:72:8a:f3:3f:74:75:a3:7c:d9:90:89:2e:0d:7c:
bb:8b:93:b6:d3:4c:ca:0c:41:bb:24:45:a4:32:02:cc:df:cb:
c4:98:31:17:3e:38:21:46:cf:75:80:52:99:c2:73:c8:fe:dc:
72:b5:a7:b3:2e:b0:83:1c:08:7c:cf:8d:2c:e3:6e:ab:a3:cf:
cb:04:25:65:cd:f9:1b:75:9c:78:ed:ff:2b:34:a9:6d:ea:ea:
60:59:3e:57:3d:a2:ec:de:c6:ca:4c:c4:e6:04:29:ed:54:47:
72:82:49:46:25:a5:a5:c3:aa:90:09:12:c4:00:26:d9:31:23:
5c:d8:05:ce:fc:50:55:11:ee:43:f1:50:f8:e2:68:4b:34:35:
0c:c3:63:fa:25:cf:2c:e3:36:98:08:0f:3c:38:08:78:4a:14:
65:a6:4b:30:e7:0b:fc:0e:63:64:d7:b9:07:05:c5:74:b6:76:
91:8b:9c:2f:da:1a:aa:b0:dd:c7:ff:d2:49:69:b3:6e:91:8b:
85:47:c1:a6:03:6d:8a:29:63:5f:a4:f0:2d:5b:e3:24:cf:51:
09:dc:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:24:55 2025 by rpki-client