Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer (raw, json)
Hash identifier: kU2W1OANC+XxgvmANklzM+fZEH6hNRBI0oMimYfnCII=
Subject key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 648A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 May 2025 18:18:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 69.94.96.0/20
IP: 207.189.168.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 May 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25738 (0x648a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 5 18:18:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:27:9d:3b:f7:dd:2b:27:fc:ad:3e:f8:86:
41:b2:05:60:1d:f4:7d:bb:1b:7c:12:4e:60:b3:cd:
18:76:89:71:cb:6f:37:ee:7b:44:38:f6:04:00:1e:
b3:7c:cd:12:1c:df:2c:04:27:e6:f7:f5:11:7d:61:
b3:f8:7c:96:14:15:9e:9b:08:85:8c:36:82:fc:78:
79:04:cb:42:ad:5a:0b:64:62:6e:01:82:eb:de:14:
38:19:32:05:09:87:a7:27:86:05:96:ae:9b:8d:ca:
9e:0e:68:9d:16:cb:5a:2c:64:d1:95:b1:50:c7:26:
b1:d0:04:09:2d:25:71:70:fa:81:f3:97:59:9d:67:
be:c3:47:92:36:20:60:44:84:a6:72:7b:20:84:c7:
a9:de:a6:7d:44:b5:5b:1a:0a:14:03:34:94:f0:d5:
0a:e3:1b:a3:db:ad:d5:4a:b5:0f:cf:93:ea:3b:84:
ad:e4:cd:0a:d4:91:0d:0f:ee:51:5c:9f:a6:de:8b:
5a:ad:65:71:0b:a7:72:75:32:ef:53:54:03:10:e3:
39:07:51:e9:50:f7:9e:0a:25:b6:6e:17:99:a0:66:
2c:d0:6b:09:7b:95:7e:6b:04:41:f2:4f:2f:ac:ff:
d5:15:9b:28:49:32:79:9d:ea:fe:51:4d:4e:cc:6b:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.94.96.0/20
207.189.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:72:83:41:bc:9a:a6:9a:7a:7b:25:e3:77:b6:cf:46:7f:d9:
77:71:d8:6e:89:b8:0f:8d:48:67:54:fe:35:dd:c8:99:b3:27:
6d:cb:f1:e3:3c:37:bb:36:95:fd:d9:44:79:e7:99:59:d6:b9:
72:54:fc:9a:c1:72:82:50:02:ea:0d:ca:47:48:b8:d2:d4:6d:
3f:ba:4f:0c:11:da:c4:89:16:cf:a2:f7:02:ff:6a:71:84:bb:
44:e2:95:ad:9e:66:b1:da:13:bd:6f:ad:f5:40:5f:09:f9:85:
69:0d:d3:11:4d:42:7f:70:2e:f0:b7:1d:d2:77:90:ba:2c:ea:
f2:97:02:a3:e5:1b:97:2b:ec:36:01:84:e5:fa:03:ce:1e:6d:
ae:9e:1f:e3:5a:30:af:f0:c4:79:3f:02:53:fb:d4:92:b5:48:
7d:89:8e:90:b5:8c:46:65:df:dc:68:22:ea:59:ad:39:cf:88:
1f:9b:13:b6:73:e8:81:87:e3:e7:fa:f4:a9:6d:7c:23:77:40:
ad:f1:5f:2f:36:40:86:4c:67:be:cb:0a:0d:db:36:0c:5d:2e:
5a:a8:ab:92:f6:86:e9:45:3f:bc:21:ba:80:ad:bc:3a:0c:40:
6d:65:db:2b:dd:a9:76:42:0b:f8:ba:73:c0:bb:70:6e:7d:67:
a9:13:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:36:35 2025 by rpki-client