
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
File: w9iTsikbOh4b9fTwQdEFLizLslo.cer (raw, json)
Hash identifier: Oev7Cn7wtXJghsNgT2QDIT2i0dUAoe6P1mXI2Brn4X4=
Subject key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 06 Apr 2025 13:56:13 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 17:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25547 (0x63cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 6 13:56:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:12:1b:ae:db:5d:ae:a0:53:f2:c0:91:b2:
f9:95:b1:e8:17:d3:c8:d7:6f:25:fc:e5:ed:63:ec:
24:cb:e3:ec:7b:e2:44:61:70:8a:ed:67:e6:04:b6:
80:8e:9e:10:ea:b5:30:6b:6a:94:b7:59:ab:81:36:
fb:41:3d:a1:07:2b:1e:54:67:68:e2:ef:73:e3:64:
48:65:f2:59:f5:e2:1c:30:f1:49:17:f9:95:b5:e0:
a9:cc:c5:94:0b:7a:35:93:aa:86:fc:09:4d:65:e5:
1a:59:fd:32:07:ff:72:6e:c0:51:b6:03:87:43:09:
a5:11:a0:99:ea:82:9c:ca:f0:1c:c1:e9:e8:9c:00:
e4:1b:fa:4b:0e:9d:13:1a:27:4c:c9:ea:23:b2:bb:
c3:7b:8b:e5:ce:70:44:8f:b9:75:19:8b:89:42:96:
ae:75:62:67:8d:92:68:ee:7e:7e:3d:4f:1a:7d:91:
da:7f:99:ac:1f:36:3e:c4:42:51:b6:ed:16:56:81:
b7:01:3a:2a:c1:b9:88:c0:3e:96:fa:6d:fd:c6:e7:
8f:09:c8:83:b1:0a:33:37:d2:99:50:29:66:67:8a:
b8:b1:1e:9c:1e:97:29:fc:98:45:ee:e1:32:9b:d4:
3a:a6:c4:92:39:56:00:eb:fc:5b:d5:ea:5c:52:5a:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.64.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:e2:ee:72:88:95:80:5b:c2:86:1a:e3:22:e2:ca:a4:43:bc:
e6:60:e6:1d:0f:93:f6:02:ae:31:a6:f8:98:e2:60:6f:a8:c4:
5b:95:ef:9d:ac:e1:36:de:a4:f4:38:e4:44:d3:61:a9:d8:29:
69:58:74:58:83:51:25:c8:b6:77:a3:59:7f:93:1c:54:9a:42:
e2:cc:b6:2e:b5:34:c0:0c:7d:b8:b1:cb:93:69:0b:76:16:02:
a2:96:b0:87:ef:11:8b:57:ad:77:58:e9:51:a1:fe:5c:ee:53:
30:fa:3a:50:ec:00:8d:23:bf:d4:e1:c7:42:fa:f3:9b:1a:26:
78:13:6d:cb:76:e9:07:db:c1:40:bd:f8:1d:69:50:d9:4b:d0:
55:f1:cf:c1:51:b2:f4:29:b3:ff:64:49:66:08:e4:e9:c3:89:
25:c0:f7:d1:19:41:d6:00:87:00:6a:e1:35:8e:f3:d7:91:24:
66:ea:7d:34:94:6a:f2:70:96:ff:a3:aa:ac:87:63:55:05:65:
7c:50:52:a4:78:5d:5c:1f:99:c5:7d:74:be:b6:a8:21:28:7c:
bf:f4:e0:dc:ef:44:aa:8b:a3:1a:29:11:9a:28:e9:f8:e6:1f:
d6:e3:4f:ed:63:9d:1c:1b:66:b9:23:d0:9a:ff:a7:31:fe:14:
2a:61:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client on console.sobornost.net