Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.cer (raw, json)
Hash identifier: 6SwcCEMxK2NN1+tfLphHvYcB71kVfPnTysXnEL9473g=
Subject key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 18:41:17 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 131.242.0.0/16
IP: 147.132.0.0/16
IP: 161.143.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20245 (0x4f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 1 18:41:17 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:40:ac:87:b3:ff:58:20:35:96:bf:52:a7:
59:8b:87:9b:e9:60:d5:3d:3c:b7:68:30:60:f8:df:
01:79:5f:58:db:37:e7:f4:b5:3a:96:ab:b7:ac:3e:
c4:5a:64:64:e0:d8:44:47:0b:18:23:fc:cb:a4:a3:
ed:71:6e:17:0c:33:b1:32:ca:6c:b0:b6:d5:21:03:
2d:73:89:24:41:15:de:0f:fd:ed:7d:2a:86:5e:7e:
32:65:b2:1c:3e:5c:7d:60:3a:49:f1:2d:0a:85:4f:
72:fb:5f:22:4e:58:ed:14:eb:b8:36:7b:09:b8:04:
8f:0f:fc:5d:ce:ca:8a:22:b7:a8:cc:39:8a:a7:dd:
d3:84:7c:b0:05:c4:ad:d7:4e:06:ba:07:4c:4b:8b:
6d:8c:f1:b0:f3:06:6a:38:d0:21:5b:2e:d1:8a:46:
d0:2f:25:9b:91:3f:fa:fd:b2:72:ef:42:23:27:80:
23:d5:5f:c2:fe:f2:17:dc:9f:45:af:78:dd:5b:7a:
5d:dc:c9:f0:c5:f1:31:c3:98:da:18:7e:d6:a5:36:
63:57:b0:15:15:4d:9d:40:e6:4d:9a:f5:59:1f:db:
5a:e8:1f:29:ad:0e:52:71:96:23:0f:a4:4d:e6:2a:
95:1f:13:b9:2d:68:09:34:ed:8b:90:c4:87:58:97:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.242.0.0/16
147.132.0.0/16
161.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:b5:eb:05:f2:75:cb:52:71:49:01:54:c2:26:5e:97:cd:4f:
b0:c1:d5:d3:96:83:eb:5f:fe:9d:e4:35:b1:8d:35:ad:af:39:
a7:73:de:bb:49:35:a2:35:05:4b:d9:fa:19:b6:81:39:87:6f:
7c:42:84:98:f4:32:28:85:6a:f0:36:2c:77:04:d5:61:6e:d2:
08:ef:74:84:62:f1:61:14:c4:b7:ce:1e:44:57:af:f7:18:f7:
d3:f3:18:1e:d5:5d:5d:f7:d6:dd:21:0a:8b:3e:b2:c6:e4:88:
84:13:f3:e7:f6:6a:4e:fa:40:f2:28:b8:ee:3d:e8:53:bb:ed:
3b:e5:fe:fb:4b:25:27:57:ea:d0:20:f2:90:30:18:b5:4a:ed:
68:4c:68:36:66:8d:78:4e:11:a1:93:f2:67:fd:02:52:b1:a6:
9b:1f:66:00:2e:72:47:b7:5e:30:7d:a6:59:94:0a:96:23:8c:
41:ac:64:52:f4:a9:ba:63:08:d7:66:3b:31:2f:a2:de:ba:00:
f1:70:6a:1d:bc:8d:2e:80:a9:ff:d4:b3:62:69:a5:ba:c1:43:
76:9e:23:97:08:58:36:4b:16:4f:b7:c0:c3:b2:cc:c2:e9:34:
a1:9f:ce:92:e8:13:32:78:32:d9:79:89:d5:03:fc:db:86:d2:
5b:3d:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:32 2024 by rpki-client on console-fra.rpki-client.org