Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
File: C5sr_BxrLAlndq91fTrxRUfkPnI.cer (raw, json)
Hash identifier: 7ySHeeAYbi+LaWr+B9rlw1k0x/ugRXDPLw5HPiKODxE=
Subject key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Apr 2025 17:11:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 167.179.48.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25588 (0x63f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 10 17:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:10:02:06:84:01:11:f5:99:df:35:e8:29:
67:27:24:f3:a6:07:2b:30:65:d2:41:ba:76:10:9a:
8e:25:c6:24:b1:39:06:4f:17:1c:8e:90:3f:a8:fe:
39:9d:52:35:ad:ca:78:d3:bc:91:9a:60:d3:c9:29:
74:51:7b:d1:80:20:0c:b1:99:76:ce:41:52:1b:a9:
40:10:a0:f1:5c:30:c1:8b:39:5c:ec:e8:7e:79:4d:
34:7d:d2:67:1a:df:3b:3e:9f:25:94:eb:39:93:15:
b0:1c:77:3d:b1:a2:b8:0f:88:b6:2e:5f:bc:88:2f:
2c:67:59:77:43:d9:a2:75:b9:c4:a1:5d:53:5e:6c:
7a:72:20:a2:9f:91:99:54:bd:2a:85:07:88:a3:53:
35:d4:0c:a8:af:7e:c9:b2:51:46:f5:1e:43:08:47:
28:71:e0:05:b3:76:af:9a:1d:c2:6c:77:7e:d1:7e:
da:b4:1b:63:bc:41:74:2c:05:47:b1:03:ec:a0:57:
d4:2f:4a:a6:7b:2b:78:0e:32:4d:1e:eb:5c:68:44:
aa:6a:90:ff:8e:76:4f:3f:9f:52:af:8f:42:99:b6:
b3:22:fb:a4:c1:2a:57:10:ba:c6:92:19:0b:97:27:
85:33:2f:9e:e7:2a:6f:80:7e:50:f8:0d:5d:23:14:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.48.0/20
Signature Algorithm: sha256WithRSAEncryption
56:89:81:79:d9:98:4b:90:17:22:4c:f6:c4:c4:5a:8a:f8:4e:
d0:67:a0:eb:11:c2:6c:23:4e:67:b3:a0:71:ba:88:9c:65:72:
03:35:67:ba:64:1c:2c:05:7e:aa:20:25:b9:b4:9e:db:4f:0e:
0e:59:9f:ca:8a:9e:1c:f9:8c:c6:58:e0:e1:d2:f3:49:2e:52:
5c:6f:00:61:a3:a1:05:0b:41:bc:f1:82:0a:30:2b:53:ee:d2:
6f:b4:79:2c:6a:65:a7:83:19:d4:35:9b:28:6f:77:81:21:56:
03:f6:63:0b:6a:43:fe:ce:c4:a9:0a:97:02:f6:46:24:c6:3a:
12:7d:d7:07:a7:3e:74:4b:07:39:74:31:8d:f3:46:a8:46:79:
24:93:10:df:9d:20:95:a5:2c:f2:9c:ad:97:67:47:49:05:0d:
38:95:b1:b1:c5:73:06:35:57:97:a2:46:a5:c9:de:56:b5:05:
d4:6a:bb:03:e9:43:ca:51:a2:65:52:78:7f:a1:44:d4:57:0d:
80:d3:71:26:89:c6:60:99:21:30:1d:0f:a0:c3:64:01:40:85:
d6:34:0d:56:27:6f:ff:f2:23:f7:6d:a6:39:ca:f1:38:0a:53:
e2:09:a0:69:f2:93:0c:88:ef:3b:65:f5:6e:62:b2:80:38:d5:
a3:e3:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:24 2025 by rpki-client on console.sobornost.net