Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
File: uzvV1-GZJNhitqQb80x_27vpHG0.cer (raw, json)
Hash identifier: mUAHm2SWboJFwvKuMw9gPyV+gi7JrpuEtOUNmZj5sfo=
Subject key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 640C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Apr 2025 17:53:28 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.124.12.0/22
IP: 160.25.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25612 (0x640c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 16 17:53:28 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:a9:ef:35:b2:2c:b3:5b:10:a1:43:6e:b1:
61:7c:2a:2d:ff:e5:9f:ba:dd:21:4c:a5:a2:f8:57:
d2:0d:f6:37:b3:e5:39:f6:01:84:23:56:81:43:30:
53:28:09:55:d0:49:8b:97:9a:14:d0:ef:ac:a5:83:
1a:08:89:bd:46:c2:60:95:44:2e:df:e7:c0:46:29:
e3:96:ca:46:ad:97:ae:c8:3e:d8:f1:d7:99:a5:00:
a9:82:28:9d:cf:d0:6f:a7:92:8b:34:38:48:f8:28:
9d:4c:ab:fb:4c:cd:1a:de:e7:b6:4a:e5:90:0b:af:
11:aa:0a:dc:b3:f9:3c:b3:bf:f4:07:06:3e:8b:92:
5d:6c:9c:09:1b:d2:03:ad:3c:87:f2:11:c5:ff:94:
ce:3f:78:68:39:6f:5e:e1:8e:52:37:dd:d7:67:aa:
d2:20:7c:aa:d2:b1:96:1d:3d:c1:bd:34:1f:1b:07:
47:be:02:72:2a:27:46:1f:01:36:75:71:0a:ef:09:
fa:9e:aa:dc:ff:ef:7b:7b:b3:c4:20:de:42:ec:56:
5d:0d:01:ed:4f:2d:8b:9d:40:98:d3:7d:36:3f:a1:
62:2d:25:f1:3b:a9:c8:f1:b8:73:3a:cf:fa:64:13:
be:3d:58:be:8c:6c:44:de:3e:72:d0:ea:9a:5b:a8:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.124.12.0/22
160.25.254.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:f6:6d:48:b1:4c:a8:24:2d:36:a6:4e:f1:a1:4a:dc:34:74:
19:27:47:5d:b5:24:6d:6d:7d:53:ad:9f:b6:21:80:e6:73:d5:
be:ee:90:96:91:63:32:99:10:b4:c3:5f:97:bd:fa:9a:26:9e:
5e:20:be:ba:17:30:96:a0:30:2d:ef:a0:41:31:b3:cc:55:65:
f6:01:ca:b0:18:6e:fb:e2:60:b4:b6:d5:9a:02:69:6b:48:a2:
fc:c0:76:8c:72:2a:5b:23:5f:8e:18:1b:20:25:3a:02:fe:57:
8d:3f:27:4e:dd:53:85:bf:5a:6b:32:45:43:f7:45:38:63:91:
67:d5:72:ca:7e:88:5a:93:ab:b0:f7:cf:f5:00:72:4b:b2:d1:
fc:21:88:26:e2:a0:01:ab:29:9e:e7:0e:a8:e1:f8:94:24:e3:
b3:27:36:01:f3:18:3c:9d:3a:c7:9a:44:de:47:06:db:91:0c:
16:13:92:c8:fe:e3:7c:44:84:c3:f6:49:07:cd:09:a2:96:14:
1c:29:c1:af:6f:ca:2f:d9:09:e2:3a:64:0f:3e:b3:91:74:3b:
be:22:1e:1a:15:77:c4:57:41:e3:50:6d:a8:0c:2b:a8:3c:bf:
6d:cc:1e:ec:c4:2a:94:b5:c6:32:9f:f5:f5:8e:6d:fb:45:ef:
1f:e2:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:31:52 2025 by rpki-client on console.sobornost.net