Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
File: e1mk24bvVBn3rb3aHfUrUJ7m33U.cer (raw, json)
Hash identifier: inRt0fxTUarSKIjJ7KrzFXLHsW1zFQkgRDM+0MjLnkA=
Subject key identifier: 7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 13:11:14 +0000
Certificate not after: Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 2400:7ba0::/32
Validation: Failed, certificate revoked on Fri 11 Apr 2025 21:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146499 (0x23c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 13:11:14 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=A91F3853, serialNumber=7B59A4DB86EF5419F7ADBDDA1DF52B509EE6DF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:f7:44:5d:37:c3:5d:9e:85:05:b5:b1:21:
6c:58:72:76:de:2a:13:93:80:9b:25:b1:35:4b:55:
5f:df:d6:ef:3a:14:44:f3:a9:54:48:91:50:a1:03:
65:66:2f:75:38:a8:dd:d4:fc:ef:63:4a:d4:7e:c8:
f4:b4:fd:d5:1b:dd:3e:58:7c:a7:2d:4b:80:ad:17:
e6:e7:17:df:ac:fe:e2:51:3b:28:7c:1e:a2:e2:27:
fd:57:fa:27:93:7a:bd:c8:15:9a:37:c3:c4:f4:cc:
c2:64:9d:8b:3a:ce:60:fe:2e:59:5d:96:3f:31:ca:
21:e9:dd:b9:91:f3:d8:66:ea:75:05:6f:47:e2:47:
1e:d2:30:03:58:be:b9:03:dd:02:e2:78:e8:36:4c:
9e:95:34:55:b5:b0:8d:ea:7d:d9:00:a9:03:be:87:
d5:27:af:78:45:02:0c:f8:60:9d:e7:6c:2b:d2:5f:
ff:96:a2:b2:28:33:16:1c:c9:48:50:a2:6a:24:15:
5c:06:e8:92:57:f8:d6:82:47:73:be:dd:11:54:e5:
7e:b4:f5:15:61:50:71:c0:2b:52:b8:5a:b3:4e:30:
0c:b6:b6:56:a9:4a:d6:5d:bf:f5:aa:fd:2b:b0:51:
fd:ca:e6:db:8b:5d:e4:0b:c7:17:7a:a1:9a:6b:23:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:7ba0::/32
Signature Algorithm: sha256WithRSAEncryption
73:79:2a:c3:ed:58:d3:99:89:50:91:6c:b3:ff:45:bf:21:85:
cd:15:63:82:a9:c3:f0:8f:8c:2c:00:88:66:53:cb:6d:5b:57:
45:56:59:3b:c4:86:f0:60:bc:ee:28:36:a0:98:be:f6:84:d8:
ee:3e:21:a6:3b:b7:f3:82:3f:4a:47:41:b9:18:e1:ea:04:71:
a2:cd:e0:b2:8e:8b:6b:8c:a4:3f:c1:86:21:af:b9:bc:25:0f:
39:9e:52:81:7e:83:75:eb:b7:fa:2b:8e:0c:7d:41:1b:73:98:
dd:7b:6d:7d:26:84:40:6b:40:de:ce:c0:9b:eb:de:0c:7c:5e:
df:d1:11:b8:48:56:7f:44:91:07:ee:27:62:5e:a7:17:3d:6e:
e2:90:a8:4e:9a:e3:2c:4e:1b:ef:f5:1c:27:57:78:e1:67:99:
d3:ab:0b:61:ce:74:4f:b0:af:82:c2:0f:17:27:14:48:da:13:
53:7f:65:c3:07:e7:d2:97:06:21:5f:b8:31:9e:fc:78:4a:ee:
44:42:e9:48:71:ba:fe:31:12:05:2a:ad:e6:15:fd:f9:de:48:
34:59:31:ed:8c:9f:25:6e:2b:85:e8:ee:3f:37:d9:13:df:3f:
ca:8f:f5:e6:7c:46:dd:80:02:00:97:d1:36:16:83:69:6e:7c:
9b:4a:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:48:55 2025 by rpki-client