Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
File: IqYsFNK9MuPlltij5iu8MnRGj5k.cer (raw, json)
Hash identifier: q1S0bq8f1bUhXwCYHm6znfGYm0EVnc5PRwj5I3vL2fQ=
Subject key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021EED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Nov 2024 17:26:14 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 202.1.128.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138989 (0x21eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 30 17:26:14 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:50:66:51:f8:9a:86:ca:96:db:60:f1:14:
ab:04:18:38:e3:c8:5d:ad:78:08:3d:fb:93:d6:48:
80:49:70:be:c9:20:e1:f0:65:e0:06:6e:28:ff:62:
f8:6b:1c:cb:a5:bc:99:0f:ed:3d:7a:65:4f:6e:7e:
07:f4:01:e1:6f:fd:80:ea:56:58:cb:b0:e7:f7:53:
28:4b:60:38:5a:53:02:76:b8:23:bd:68:bb:73:d1:
b9:2e:4d:34:3c:0e:8d:c6:24:87:65:5c:fa:c0:27:
73:82:0a:1c:18:0b:9d:48:57:51:c8:5b:73:1a:61:
8b:c1:8b:18:96:ec:fb:61:f6:c0:a5:45:51:c5:b4:
94:c5:21:6f:8b:1a:e0:d6:bc:60:70:66:5d:1a:d1:
67:06:32:57:b2:07:b3:b9:44:b0:e0:79:df:54:bc:
a3:83:00:ab:e4:56:e2:51:b4:9d:dc:42:c7:f8:4c:
47:23:8e:8f:ee:55:54:fb:72:25:4c:b3:23:b9:a9:
72:e2:81:29:69:3e:97:2f:79:70:e1:82:a2:54:6d:
27:e8:8d:3b:00:2f:b2:04:90:7f:e4:45:ab:9f:5e:
28:78:f6:ab:85:68:1b:90:e0:7b:64:56:9d:04:0a:
d7:f6:9e:52:df:6a:a8:ac:d6:60:23:24:33:92:e3:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.1.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:a4:35:28:de:47:5b:72:43:e7:b7:8e:dd:d0:6e:0e:b3:2c:
7b:bf:40:5d:d0:19:f0:11:c9:8a:51:01:4f:6e:5a:54:60:16:
b1:9b:f5:c8:01:57:bb:05:11:93:ea:81:87:48:5c:14:c8:ba:
eb:e0:63:c8:2a:09:5c:9d:36:db:9e:3e:40:2a:52:b2:e8:d4:
75:8b:d3:4c:40:29:cd:37:a7:c3:10:83:0f:7b:2a:99:06:41:
05:30:42:ef:4a:b7:02:99:85:1a:77:b7:96:8c:47:eb:6e:27:
f8:0c:94:01:a2:93:60:1e:dc:46:95:db:fe:f8:2d:f6:0e:de:
3a:6e:53:a2:66:7d:0b:57:3a:7c:c6:c2:63:ad:4a:7a:a0:00:
54:7a:11:39:dd:b3:d3:bb:c2:ff:4c:59:d5:fd:ba:af:6e:f8:
38:73:69:aa:59:c0:9f:ad:27:b2:71:45:1f:91:37:e3:60:43:
a6:2b:1c:af:c6:ab:c7:cf:6b:73:e8:b4:46:70:81:06:b6:3f:
12:60:7b:e1:d4:f7:42:f6:ae:27:8a:35:45:5d:54:0f:29:70:
cf:02:fa:15:6b:3d:d3:cd:3e:c5:38:77:3f:0f:f3:35:b5:29:
f3:9b:c1:75:06:d4:77:11:fe:0c:98:04:01:3b:39:19:0a:c6:
46:c1:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:29:11 2025 by rpki-client