Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.cer (raw, json)
Hash identifier: kc7ara2Qln5teWu3vym2916Fn8+CqT3Eu+Cm+xbvctc=
Subject key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6262
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Feb 2025 04:13:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 137.109.0.0/16
IP: 152.91.0.0/16
IP: 192.58.133.0 -- 192.58.136.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25186 (0x6262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 25 04:13:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:a5:65:cc:35:cc:2a:46:27:29:02:d5:0d:
85:e7:7a:a4:09:02:71:7e:ee:a5:d0:be:c3:12:1c:
92:3e:c9:f0:83:cb:cb:4a:e0:e0:bf:4f:14:ac:4c:
a4:2a:f9:42:b0:09:1f:d8:53:00:83:87:8f:ab:f4:
a6:8a:44:01:d7:ba:00:09:25:f1:4f:a2:93:2d:e4:
a4:74:eb:ed:1a:fa:5b:84:16:df:3b:6f:78:68:86:
75:14:c2:ad:5b:c8:59:a7:4f:5c:ad:fc:22:bd:c2:
01:1c:c4:72:37:1a:f5:18:12:5a:c2:4a:c9:ed:10:
fe:5c:53:8c:e6:55:a5:68:02:4f:24:8c:5f:8a:54:
da:cb:eb:c5:8f:b7:36:7e:a6:fb:24:54:de:82:73:
c0:c0:c0:65:c5:b7:18:03:44:5d:e7:be:05:29:31:
17:bc:9b:3c:20:60:8c:00:49:b7:7e:43:bd:75:34:
60:be:ff:24:f3:cb:e9:b7:77:8f:45:70:8d:71:57:
95:f7:3e:ba:76:7f:7d:e9:7a:49:8a:8c:20:50:94:
e2:36:c9:86:29:4a:17:75:2b:c0:90:1c:cb:5b:8a:
ec:ec:b4:0f:86:c2:3a:be:3b:e5:b0:d2:e7:85:df:
25:bd:33:fd:eb:a7:9c:f2:3c:7b:ca:3f:bc:c7:f2:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.109.0.0/16
152.91.0.0/16
192.58.133.0-192.58.136.255
Signature Algorithm: sha256WithRSAEncryption
bb:d3:3f:7e:3e:6e:d2:0f:f9:26:10:e7:ae:df:2c:c1:07:af:
29:44:5b:24:ad:28:57:f8:f7:a9:ae:b6:45:e4:68:10:1b:52:
18:75:97:5c:2f:19:00:cf:2c:2b:91:9a:fa:77:be:06:94:3e:
95:84:ab:b3:c5:65:ee:26:22:d6:90:85:e7:db:ae:8a:b8:27:
15:ff:e4:e3:38:e7:00:9a:c9:5a:d1:a1:cc:6e:90:a6:d5:fd:
46:fe:56:f7:17:3a:42:4b:8d:f1:56:99:2d:ee:3e:65:fd:94:
9c:68:80:e6:81:58:ec:6d:88:f6:3c:71:79:f7:71:52:68:ee:
16:42:93:ce:66:b2:a7:34:a5:3a:32:ba:65:6b:c7:12:4c:5b:
a7:82:20:59:f9:5f:40:ca:89:f3:fd:88:03:a6:03:a1:13:56:
03:71:3b:c9:b7:f9:51:70:b1:97:2a:e1:00:aa:6e:32:90:46:
72:e2:bb:1c:f6:c9:21:04:4a:80:05:74:6c:bc:67:6f:13:53:
87:dd:8e:c3:6b:aa:fc:fd:aa:e8:06:31:84:7e:29:9d:89:4a:
54:7f:63:38:a2:77:ec:4a:42:c7:80:3f:02:03:d5:5f:43:a1:
9a:3c:ff:4d:15:27:f0:30:c1:b4:8c:5b:91:e2:50:78:cd:32:
23:c4:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:08 2025 by rpki-client