Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
File: STl-M7McCo9o_NIHK9qazLZdAuw.cer (raw, json)
Hash identifier: B3f/ep+4pLIxI14SUjjKBOrkWVvT4KlDnu6Oz9oguU0=
Subject key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6276
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Feb 2025 09:03:46 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 146.116.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25206 (0x6276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 27 09:03:46 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:e2:6c:31:b4:53:13:02:ea:0a:4d:c7:09:
32:ea:36:0c:76:cc:da:0e:1a:be:90:27:77:2f:0b:
f9:2e:9f:1e:9c:3e:0a:f0:67:a2:e5:23:f3:c8:3d:
c0:89:9c:b4:36:51:d3:85:8e:80:4f:f7:1c:34:7c:
88:67:e6:67:be:4b:d0:cc:26:9b:d9:fd:df:6c:f0:
b0:5b:af:95:d8:8e:17:d6:2d:15:42:16:c4:2d:fd:
0a:d1:a1:d3:42:0b:cd:ec:96:40:bd:13:33:46:ef:
6d:e6:38:ae:2b:2c:61:60:80:2f:ae:fd:4e:f8:79:
7c:2b:9f:ad:4b:05:91:2a:eb:06:81:39:03:64:97:
f4:b0:e5:f6:31:27:da:5d:1b:a6:05:a0:a7:c1:be:
4f:33:bf:44:62:80:2a:6d:01:fc:b7:d9:da:18:14:
f7:0c:d8:e5:8e:f1:86:31:44:b9:6f:76:05:a6:20:
89:1d:bb:8c:18:95:79:e2:0c:d8:07:60:5d:79:1d:
9b:6b:0a:73:4a:ec:45:e5:30:7e:49:86:ec:6a:32:
ae:cb:2a:96:53:37:94:61:de:67:99:37:83:94:91:
b6:ed:d4:b6:fa:57:75:39:95:4b:6c:d4:cd:91:a5:
0a:bd:5c:ff:d4:72:52:56:3d:a1:c0:7f:6b:49:f8:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.116.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:b9:8c:17:16:10:4c:29:06:fd:de:2c:af:6e:dd:5e:4a:90:
dd:80:a4:de:94:20:69:44:24:76:41:fb:9c:8a:81:49:d6:f9:
ac:52:f6:47:7b:ba:42:2f:4d:a6:79:29:2a:c8:d3:45:09:15:
ee:ee:66:62:77:6c:e4:0a:3d:31:81:3b:67:b1:55:c1:91:25:
e4:b2:d3:fc:53:fa:8e:7d:6d:d3:eb:db:51:e0:5c:5d:5e:98:
cc:a8:36:fe:16:6e:4d:c8:a8:b5:54:c2:5a:5c:0f:7a:81:49:
9b:bd:7b:13:12:3f:78:a9:ce:57:56:a7:ae:20:dd:41:52:90:
90:c0:ce:fc:46:15:0c:51:96:b4:c3:f6:c7:76:ce:74:57:64:
12:29:79:c5:16:e6:8c:08:fb:60:f5:d6:73:70:5d:75:cb:6d:
79:ea:ce:61:e0:3c:0c:4e:f8:4d:b1:03:88:88:93:05:94:d4:
9d:85:de:9f:a2:c0:26:51:e4:b3:10:ca:6e:d4:be:59:a5:3c:
f4:94:24:53:46:a3:5b:87:31:4a:5d:fc:77:87:b2:7f:4a:23:
9f:81:6d:06:92:5e:d1:d4:47:2e:13:ea:1e:6d:01:ea:49:6f:
fb:cc:29:06:02:a9:b6:17:51:f3:ad:3d:57:db:b9:30:72:2c:
9c:bf:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:31:47 2025 by rpki-client on console.sobornost.net