Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer (raw, json)
Hash identifier: PCIHKUN7NEpG7fUSrfNgOz61o6+NtuLe2zwnFYwtxKk=
Subject key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6424
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Apr 2025 01:43:23 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 146.88.200.0/23
IP: 146.88.204.0/23
IP: 167.179.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 17:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25636 (0x6424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 22 01:43:23 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:fb:25:38:4f:d3:44:8f:ef:1d:f5:1d:79:
54:d5:54:55:2c:aa:30:17:98:93:20:5f:21:c1:79:
f1:c6:5d:58:19:f9:32:e4:d9:bd:a7:10:51:fb:2c:
c5:0a:90:19:d1:89:e3:d7:10:e5:87:ed:d2:26:94:
03:88:93:16:21:25:71:ad:8d:0f:ea:1b:cb:21:e9:
25:47:33:9d:10:c2:ef:65:fd:7b:06:00:2d:4a:42:
9b:9d:4e:1e:6b:d6:81:28:0c:29:59:31:e8:bd:01:
52:b1:9f:b6:e1:5c:0d:7f:3e:09:0e:db:9e:9c:6d:
ae:15:89:d1:64:5a:1e:51:ab:cc:51:96:87:74:00:
a1:9e:e7:3c:12:54:74:5e:4d:bb:df:e2:3e:42:77:
e2:da:e5:23:47:76:49:5d:6b:9f:50:99:bf:bc:16:
ff:d7:40:5a:92:e7:81:14:88:0b:41:59:d6:3b:ec:
6d:07:e7:3c:fb:5e:f7:42:7f:46:87:a7:da:e9:0f:
7e:76:92:30:c1:90:42:4d:74:88:aa:de:b8:ca:c0:
ad:29:37:07:e8:bc:ad:bf:50:56:03:e1:e0:ed:e8:
47:fb:20:74:d1:9f:dc:a9:90:ae:5f:bc:ca:88:76:
18:e8:52:73:02:a0:5b:23:f8:50:a6:9b:2f:5b:15:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.200.0/23
146.88.204.0/23
167.179.20.0/23
Signature Algorithm: sha256WithRSAEncryption
90:bf:a4:24:2f:d9:3b:9b:2d:a3:01:64:de:ed:4c:32:f2:d3:
d2:d2:da:d6:2b:2d:1c:7f:9e:f9:5d:6d:ac:6b:58:53:72:98:
e0:91:87:e3:8c:af:d1:ff:e1:cf:16:e8:da:12:0a:1f:25:6f:
f1:f7:8f:c3:df:14:ad:7a:e4:d6:35:a7:9b:68:58:e9:03:d8:
f4:25:66:58:e1:da:5f:e0:ba:35:7c:c8:20:d9:6c:8f:f1:da:
55:b8:a0:41:06:1c:cf:71:20:48:7d:f2:d9:cc:03:7b:43:6a:
3d:2e:ed:a9:57:ae:33:1a:db:11:25:82:ab:8e:8a:ba:8f:bf:
48:23:bf:18:88:dc:52:05:51:7a:d2:3c:3e:60:4d:09:fd:54:
bf:a4:7c:19:e9:f6:6f:ad:56:9c:63:99:42:69:73:4c:bb:1a:
88:63:e6:ef:10:93:77:2d:28:b0:c0:2f:b1:b5:9f:53:93:23:
77:80:90:df:df:17:b6:ca:7f:80:b2:f1:b1:d1:3a:27:f1:bf:
74:53:61:d6:8c:9c:8a:2e:e8:9b:c4:6a:6c:0c:fd:74:4c:ee:
51:4a:5e:21:3f:eb:85:0d:2e:7f:0b:c2:9a:22:64:60:f1:46:
f8:ff:53:9d:7b:57:b9:8b:f8:f9:05:5b:f8:37:af:84:63:85:
47:ba:1a:28
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgICZCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNDIyMDE0MzIzWhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExQ0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3
NkYyMjZDMjE4OEFBMTU2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJGy+yU4T9NEj+8d9R15VNVUVSyqMBeYkyBfIcF58cZdWBn5MuTZvacQUfssxQqQ
GdGJ49cQ5Yft0iaUA4iTFiElca2ND+obyyHpJUcznRDC72X9ewYALUpCm51OHmvW
gSgMKVkx6L0BUrGftuFcDX8+CQ7bnpxtrhWJ0WRaHlGrzFGWh3QAoZ7nPBJUdF5N
u9/iPkJ34trlI0d2SV1rn1CZv7wW/9dAWpLngRSIC0FZ1jvsbQfnPPte90J/Roen
2ukPfnaSMMGQQk10iKreuMrArSk3B+i8rb9QVgPh4O3oR/sgdNGf3KmQrl+8yoh2
GOhScwKgWyP4UKabL1sVN6kCAwEAAaOCAv8wggL7MB0GA1UdDgQWBBRoQT1B9gBe
Axbg4ldvImwhiKoVbzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBODIvRjY5OUUzNTRDRjEyMTFFRjhGMUQyMDVCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFDQTgyL0Y2OTlFMzU0Q0YxMjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllB
WGdNVzRPSlhieUpzSVlpcUZXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow
GAQCAAEwEgMEAZJYyAMEAZJYzAMEAaezFDANBgkqhkiG9w0BAQsFAAOCAQEAkL+k
JC/ZO5stowFk3u1MMvLT0tLa1istHH+e+V1trGtYU3KY4JGH44yv0f/hzxbo2hIK
HyVv8fePw98UrXrk1jWnm2hY6QPY9CVmWOHaX+C6NXzIINlsj/HaVbigQQYcz3Eg
SH3y2cwDe0NqPS7tqVeuMxrbESWCq46Kuo+/SCO/GIjcUgVRetI8PmBNCf1Uv6R8
Gen2b61WnGOZQmlzTLsaiGPm7xCTdy0osMAvsbWfU5Mjd4CQ398Xtsp/gLLxsdE6
J/G/dFNh1oycii7om8RqbAz9dEzuUUpeIT/rhQ0ufwvCmiJkYPFG+P9TnXtXuYv4
+QVb+DevhGOFR7oaKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client on console.sobornost.net