Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.cer (raw, json)
Hash identifier: qTwd2kMPVMdvEjaMsAt+oIMpjGfiV5UM8C0Rsh4sDnA=
Subject key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5279
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Feb 2024 17:10:14 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 137.109.0.0/16
IP: 152.91.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21113 (0x5279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 20 17:10:14 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:a5:65:cc:35:cc:2a:46:27:29:02:d5:0d:
85:e7:7a:a4:09:02:71:7e:ee:a5:d0:be:c3:12:1c:
92:3e:c9:f0:83:cb:cb:4a:e0:e0:bf:4f:14:ac:4c:
a4:2a:f9:42:b0:09:1f:d8:53:00:83:87:8f:ab:f4:
a6:8a:44:01:d7:ba:00:09:25:f1:4f:a2:93:2d:e4:
a4:74:eb:ed:1a:fa:5b:84:16:df:3b:6f:78:68:86:
75:14:c2:ad:5b:c8:59:a7:4f:5c:ad:fc:22:bd:c2:
01:1c:c4:72:37:1a:f5:18:12:5a:c2:4a:c9:ed:10:
fe:5c:53:8c:e6:55:a5:68:02:4f:24:8c:5f:8a:54:
da:cb:eb:c5:8f:b7:36:7e:a6:fb:24:54:de:82:73:
c0:c0:c0:65:c5:b7:18:03:44:5d:e7:be:05:29:31:
17:bc:9b:3c:20:60:8c:00:49:b7:7e:43:bd:75:34:
60:be:ff:24:f3:cb:e9:b7:77:8f:45:70:8d:71:57:
95:f7:3e:ba:76:7f:7d:e9:7a:49:8a:8c:20:50:94:
e2:36:c9:86:29:4a:17:75:2b:c0:90:1c:cb:5b:8a:
ec:ec:b4:0f:86:c2:3a:be:3b:e5:b0:d2:e7:85:df:
25:bd:33:fd:eb:a7:9c:f2:3c:7b:ca:3f:bc:c7:f2:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.109.0.0/16
152.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:d9:8f:29:64:56:9a:2b:db:e7:21:fa:f9:73:0a:0d:61:d2:
92:2f:7f:0c:10:67:9f:92:2b:d4:f4:2d:43:8d:0d:ba:d3:cb:
e8:30:17:6a:58:46:9b:b7:f5:4e:33:6d:c7:9e:a7:15:d2:d6:
e1:ad:ea:35:82:08:9a:3f:c6:10:79:1f:38:dd:0d:82:98:fa:
2b:bc:f9:ca:a6:77:f7:8c:13:11:50:74:95:b8:a1:6f:0a:98:
ee:e6:ae:40:af:0f:22:a1:80:50:94:82:69:00:a3:80:ce:62:
80:ec:d3:61:bc:41:fd:e9:11:78:60:52:df:96:05:7e:56:a9:
07:5e:f9:27:62:52:5f:e3:cd:f7:16:b1:d1:32:66:ab:49:b3:
87:92:c0:ac:a3:28:c2:f6:ec:e0:21:65:6a:2e:da:c2:51:ef:
18:66:31:e6:fb:3a:41:6f:1b:27:ac:6a:77:1c:67:a1:a5:67:
fd:ca:0b:7b:7a:7d:0c:d6:bb:1c:c5:96:68:21:2f:87:df:c5:
31:0f:8c:55:9e:35:d5:d0:8f:94:6f:c6:16:b2:e7:d5:bb:d8:
a0:3d:62:3f:bf:26:4f:fe:b2:ff:7e:ac:7d:b3:15:2e:7c:91:
4d:55:b0:50:91:2b:a7:cc:07:63:2a:21:5c:9c:c7:e2:19:7b:
be:af:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:32 2024 by rpki-client on console-fra.rpki-client.org