Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
File: V88585q2G1OO6nyy1Wo0vle4mvs.cer (raw, json)
Hash identifier: 2/mcbYUQQiUosbi8syDM4Hep73kvvZrNKwVQEuxT94I=
Subject key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 54DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Apr 2024 15:54:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 131.217.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21722 (0x54da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 23 15:54:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:75:1e:d8:c3:58:ff:a3:43:d2:d9:eb:2a:
22:89:77:eb:e1:c6:39:27:34:0d:34:45:51:92:5f:
34:8e:d2:69:64:a5:e1:b8:13:52:5d:72:61:eb:3a:
bf:4b:8a:d3:8b:bb:68:83:ab:90:9c:76:18:fd:54:
04:5a:af:10:1b:d8:23:b6:5d:b2:11:6b:c7:f5:0e:
ae:34:45:20:6a:73:9e:4a:e0:a5:6b:db:65:54:e9:
c2:7e:fe:5c:cd:e0:e5:62:55:2a:51:36:47:d2:c1:
df:83:5b:8c:7d:37:a1:10:86:f3:d0:b3:6b:bc:7f:
5d:f4:e6:97:21:1c:16:2c:a9:a5:a6:93:7a:4e:f6:
a8:b6:0d:b4:b7:7d:ce:b9:68:d8:94:a3:db:42:4f:
9a:3f:23:65:3f:e4:ea:78:07:f9:0f:c1:39:9e:d3:
c3:b2:54:d3:31:d8:33:f4:9a:45:1a:9f:48:c5:11:
27:aa:18:3d:49:40:ba:2e:99:a9:d9:17:ba:69:df:
ca:21:cc:2e:bd:9c:ef:8a:e6:44:5a:ea:75:25:12:
07:7e:dd:ec:ff:a9:32:29:e2:c5:b2:8a:d6:5c:43:
e2:67:db:26:d6:a4:d7:d0:68:38:ba:dc:a3:ed:bb:
45:bb:f6:b5:a4:00:86:45:8b:34:dc:90:06:fe:74:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:1c:53:d0:b7:63:4d:6f:90:b7:bb:5b:e5:64:d7:5c:01:64:
8f:a2:eb:bd:7a:bf:56:97:f8:10:fb:e1:05:d8:22:41:f6:95:
2f:c7:08:55:19:7e:99:fb:e0:06:c8:55:d7:ec:21:3f:fd:34:
72:b0:27:d1:69:a5:d4:10:9d:eb:fb:f9:4d:bf:a7:be:2a:3d:
eb:ec:19:2f:d2:88:03:ea:d5:7c:9f:e8:8f:e2:27:c1:b6:d9:
18:70:7e:0f:a4:d0:56:d3:05:d3:45:ff:74:01:04:e2:e8:06:
1a:87:44:dc:ad:ba:fe:2d:4a:aa:7a:c4:50:88:ad:29:93:26:
d0:24:29:99:1d:01:34:c0:83:3e:ba:65:69:ae:58:ba:66:21:
d5:b7:2d:98:7f:90:d8:bd:0e:46:87:0a:26:56:60:11:f9:5f:
87:1d:5e:6c:5b:fa:f9:04:20:e8:62:f1:f5:de:1f:4e:17:e6:
aa:61:69:13:09:81:f6:cb:9e:e9:47:fc:58:7f:5e:1e:48:b7:
99:a6:13:8c:b9:9a:95:28:76:eb:94:e3:a2:ff:e8:85:d0:c8:
05:d2:5e:28:0c:89:ac:46:fc:68:92:a4:f1:d8:ee:36:95:c1:
d2:38:1c:b8:7c:1d:ed:48:31:79:3f:62:ae:46:cb:ac:1b:1a:
8a:58:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:07 2024 by rpki-client on console-fra.rpki-client.org