Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.cer (raw, json)
Hash identifier: 0Ckz41zeWTSGCTQqIqAdrefLCBFtDiE+ppRyEGaUCXw=
Subject key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63E2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Apr 2025 14:41:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 64.119.16.0/20
IP: 66.181.160.0/19
IP: 192.82.64.0/20
IP: 192.82.92.0/22
IP: 192.82.100.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 May 2025 20:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25570 (0x63e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 8 14:41:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:2f:f0:f5:0f:22:45:50:29:45:c6:bd:19:
ab:c1:1f:be:c1:15:0a:d9:eb:19:95:89:92:dc:9a:
70:3f:f0:63:6b:dd:48:e6:4c:6c:79:82:6b:a2:dc:
d6:ff:26:12:2a:fa:dc:8a:63:d3:d9:4b:0d:a0:24:
8e:e2:62:c6:27:79:66:d2:a3:e5:16:d2:18:5e:56:
30:87:28:1f:af:25:6d:db:12:d1:8c:07:fe:b9:93:
e6:d4:d6:42:af:4f:df:f6:43:cd:2a:f0:48:df:1a:
0f:29:5f:6c:07:a7:ea:4e:9d:d7:96:de:61:c6:d8:
eb:54:f8:cf:35:2c:83:e8:d0:b7:e4:1e:6a:b2:61:
97:a8:8a:2e:63:97:68:97:21:28:a7:74:50:4f:3c:
65:e4:aa:85:75:76:a7:b6:9b:dc:b4:ad:26:f7:df:
47:d6:14:4c:5f:5a:f9:f8:32:68:0b:9b:0c:6d:3e:
42:ec:17:79:81:03:08:53:83:09:c2:14:8f:4e:08:
64:11:a1:9b:bb:4d:01:4d:a8:65:a3:1f:0e:6e:79:
d9:1e:ff:4d:7d:f6:8c:2d:bd:9b:7c:00:26:06:c2:
7b:0e:18:f0:df:2e:99:74:93:79:c3:13:b7:62:8a:
f6:b3:ad:30:a6:0f:3e:d6:71:f6:ed:42:f0:85:e1:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0/20
192.82.92.0/22
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:af:dc:ef:15:15:d6:ce:f4:b4:80:93:07:a4:98:c9:27:
cd:df:ee:a0:63:c1:65:ae:10:1c:9a:77:81:c5:cf:2c:3e:28:
3f:05:41:88:31:6b:ad:35:07:9b:90:60:45:62:6e:4b:4d:4c:
eb:41:2c:65:e3:02:99:bd:5f:a4:63:f4:57:b5:66:f4:e9:0c:
2d:53:49:81:d8:d8:2b:f6:dc:2b:f2:2a:e8:0b:7f:77:91:e6:
92:c6:10:b7:48:34:ee:9f:b8:e1:fd:46:96:79:37:9e:8e:49:
fb:9a:fd:1e:f0:a1:f4:a6:f7:70:1f:71:36:d0:1f:8c:4b:29:
07:06:a4:4d:ae:e1:2d:8c:23:77:f9:fe:07:6b:1a:6a:87:a5:
a9:f0:47:81:12:4b:28:74:9a:43:b7:17:73:f1:ce:56:7d:17:
84:03:44:b4:95:07:77:d2:a5:aa:ff:c6:8d:f8:4e:af:86:80:
4b:88:be:1b:0c:32:5c:a7:00:7d:ef:9d:b3:16:ed:db:01:a7:
69:6b:2d:80:fd:aa:21:fd:ad:81:de:e5:f2:d7:3f:4f:a5:76:
52:71:f2:76:09:d7:e8:09:06:24:4d:8a:51:05:1b:6c:ef:68:
78:db:f8:52:81:62:98:9d:33:93:2c:e1:3a:a2:76:61:81:a3:
a9:f8:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:01 2025 by rpki-client on console.sobornost.net