Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
File: iJGVOO7eyDINXq9rHzKymCOreBA.cer (raw, json)
Hash identifier: 7IMmEXiiHQl+sbfBNl9ebX+ElHbfsnHOhNbAmYuV+YM=
Subject key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Apr 2025 14:37:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.11.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25568 (0x63e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 8 14:37:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:80:a1:81:3f:3a:ef:a4:3b:ec:5c:d0:12:
f1:b0:05:b9:5f:e2:c0:00:d7:1d:8d:ba:11:63:a3:
ec:d0:2a:04:23:3f:07:2b:49:f8:1e:ab:29:e9:9a:
66:0f:94:2b:49:e3:38:18:0a:5e:a7:fa:48:89:fd:
d1:31:1e:81:6e:c1:11:59:91:1b:c8:30:35:21:10:
38:0a:e5:7a:98:73:e2:e5:e6:e5:f3:d3:28:6d:26:
68:ae:da:51:6b:88:24:c8:84:28:e5:23:8c:ac:55:
8e:a2:15:27:53:d9:25:a6:16:c1:5a:7e:56:e0:be:
aa:f9:cc:dd:cf:12:42:8d:6d:ec:1f:11:a5:1a:f0:
bc:35:26:55:d0:c8:81:da:5b:59:df:a4:28:4f:86:
fe:af:52:de:d1:44:33:cf:f3:7c:4e:e1:81:10:cd:
f7:f2:1e:ce:99:f5:09:64:90:57:1c:db:d5:b7:fa:
46:9c:2b:66:bb:b9:c6:55:4e:25:66:14:65:e3:38:
c9:b3:24:18:5c:b7:66:5c:ea:93:62:1a:b7:7a:22:
f2:4c:24:8c:30:a7:40:18:d3:d6:e8:d7:a8:78:04:
bb:23:19:0b:75:24:05:e4:9f:1f:a2:a6:b1:76:1a:
94:8f:2b:2e:e0:cc:d3:93:81:a7:77:a8:a9:5d:b5:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:44:55:d5:50:cc:18:7d:9d:63:34:3b:02:ca:ef:56:c2:4d:
e2:2f:ab:a7:9e:0d:e7:62:be:f6:79:0c:6f:cb:05:11:fb:28:
f4:a6:a7:58:89:03:db:b4:ef:21:d3:98:57:98:20:a0:b3:24:
fe:61:25:b6:cf:ed:d5:84:d2:d2:80:be:ae:fb:f2:5b:56:54:
4c:b6:7b:4d:91:4b:6a:b7:e6:41:38:fb:94:dd:3e:83:53:80:
99:38:1b:38:df:91:bf:70:dc:85:00:c2:0d:bb:c6:91:52:35:
cf:9e:3a:d7:f9:a1:d2:1d:bd:6b:e0:28:6f:06:a6:66:30:fa:
e8:b2:5e:b3:8d:0a:bb:44:ef:c6:58:14:b6:61:f5:3c:0d:9c:
36:03:5e:c2:c2:8b:d9:67:13:e2:54:12:8b:d4:45:35:5a:dd:
cb:73:5b:b4:4b:73:e9:00:64:2f:e2:7e:77:98:d8:2d:19:b4:
82:5d:63:fa:3f:c6:96:a9:44:0a:1f:d2:dc:23:8c:fd:00:20:
b9:ab:1b:80:55:a9:ec:98:1e:62:5e:f6:2f:71:66:fc:80:47:
39:6c:a4:dc:84:8c:01:cf:3e:ab:9e:67:1c:55:cc:2c:d8:24:
d7:8b:e9:58:49:be:03:7d:f3:86:be:d6:9a:27:47:0a:9f:e8:
b9:3c:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:51:19 2025 by rpki-client