Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
File: -YvpQtnreFakMNG8KUc7xN1nf-o.cer (raw, json)
Hash identifier: wE8VzFyY2Y0e2LdvKLHdYTU5ViE/w//VKkUQKn01Mdk=
Subject key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 56EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Jun 2024 00:44:16 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.144.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Sep 2024 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22250 (0x56ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 19 00:44:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:06:97:06:5c:15:33:04:6a:4c:8d:e9:b8:
08:87:58:fa:0d:e3:cc:df:1f:13:ae:11:a0:02:55:
0d:a4:a5:dc:a7:a6:89:94:0b:14:ef:5e:22:09:9f:
3a:79:93:2a:25:d6:0e:f2:2e:fe:1a:db:60:e6:4c:
e5:47:29:43:24:44:cf:ab:7d:af:d4:9a:5f:33:52:
1a:28:33:83:4f:9f:d9:5b:80:b2:1b:35:52:8b:39:
f5:34:78:40:d1:2f:de:97:e3:4b:38:7d:b6:71:4a:
df:b3:15:76:eb:22:87:aa:b8:7d:8c:32:51:97:d5:
7a:f6:1a:d0:62:f0:9d:27:49:e3:c5:c7:81:39:9e:
92:33:4d:ba:9b:2f:fa:8d:8e:d8:1a:5b:9a:94:e8:
51:03:e0:69:43:cd:0f:30:4c:e1:9b:0f:0b:31:1f:
74:3f:0e:8e:d4:3f:25:e0:a9:cf:a5:98:0e:ff:39:
bd:ac:e8:80:29:fc:c2:96:96:20:7d:89:3e:ca:05:
b5:b9:79:e8:87:85:81:ef:af:c7:71:a9:1d:55:56:
75:bb:c9:bd:a0:a0:cb:bb:3c:4d:7d:71:f0:b4:33:
08:88:98:f0:ef:8f:43:46:df:79:ff:ba:95:12:6b:
7e:af:44:fa:e7:64:ee:5e:5e:dc:2b:d9:5c:4b:76:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:29:f1:d3:29:fb:d8:e3:83:fd:0e:a2:d8:a9:9b:87:db:
09:30:3e:20:0b:71:35:2c:b8:48:cd:89:e2:aa:f2:c2:68:aa:
49:b2:41:38:51:5c:e9:51:d0:0c:f4:76:f4:8b:f8:be:03:f0:
2e:a8:53:96:f9:5f:d2:24:4d:f4:04:03:ae:65:1f:3f:37:96:
07:2d:ce:cd:44:38:02:9b:88:bf:b8:d6:30:9c:b5:a8:2f:fc:
ad:33:4e:fe:87:70:47:85:d6:8d:85:2e:37:08:e8:5a:97:db:
45:db:b4:90:3e:9c:59:21:25:4c:19:c9:db:8d:4f:da:9a:bd:
9e:29:8d:33:e2:89:8d:6b:79:3a:c0:84:bb:90:dc:a2:d8:82:
da:71:54:7a:4b:ec:9d:49:66:5a:8e:fa:f2:f9:cf:ff:c5:eb:
3c:bb:23:f4:47:26:cc:cb:31:0d:8e:22:8a:48:b3:f2:91:09:
94:dd:70:d5:b9:1d:29:2c:75:2e:68:b2:a1:e5:f1:61:43:01:
0d:a7:d7:ab:c4:82:83:4f:fe:60:74:58:26:da:a0:b6:31:75:
38:0d:32:6b:b6:17:d6:e8:53:9b:61:6c:2d:80:b2:da:f0:6e:
61:64:3a:25:48:f7:f0:b3:28:31:6a:ce:a2:09:ec:4b:56:d0:
46:19:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 07:02:21 2024 by rpki-client on console-ams.rpki-client.org