Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.cer (raw, json)
Hash identifier: 8UZHf2UzFcJ9G5VogjlypacCSzXhPVRG1xLVVd0eUo0=
Subject key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 609D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Jan 2025 00:53:36 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.170.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24733 (0x609d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 10 00:53:36 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91B15DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:8a:df:96:d5:3b:26:6b:64:25:f8:5f:f5:
8a:c7:a4:1e:d8:21:a5:f6:29:5c:cf:93:34:27:da:
4c:91:79:cb:c0:3c:48:10:98:bc:81:c7:27:f5:33:
38:10:9f:a0:5a:78:ed:8d:77:93:c7:0f:96:23:d9:
dc:d1:99:04:95:aa:ff:97:da:8a:7f:bb:f7:8b:ac:
6b:97:1f:a2:3d:db:11:af:47:98:2a:d4:36:fe:cb:
4d:16:53:1a:e9:1e:3a:6d:51:4a:bb:56:f1:ae:7a:
e6:a1:81:ff:a4:9b:21:7a:37:f3:61:7e:3f:5c:1e:
47:48:f0:ca:14:0f:24:56:28:4d:38:b8:c6:c9:b0:
26:f5:00:76:50:b7:98:10:ed:64:e5:0c:d5:82:72:
85:b4:76:31:c1:1b:7d:a1:d2:25:9a:30:e8:5e:d1:
2b:cb:64:09:12:21:7d:e3:7c:07:e4:9b:9e:d3:a9:
3c:7e:ab:ca:36:4f:2f:eb:8e:af:2d:cf:14:b4:16:
52:63:4c:81:90:ee:5b:47:06:c3:b1:d4:c7:4e:48:
cc:a0:72:86:83:23:83:dd:52:e4:64:cd:c9:a1:c9:
be:d3:9d:8c:eb:28:76:4a:75:6b:48:14:a3:5a:da:
b7:c8:ed:00:11:30:99:5c:6d:15:c1:b9:67:57:5f:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.170.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3f:23:b8:14:6d:2f:e7:a9:da:87:87:dc:c3:15:80:56:ce:
9e:44:89:e3:37:29:08:28:61:8d:0b:ac:1a:2e:61:ee:2e:8e:
58:a0:5f:e1:96:4b:6d:e0:08:8e:64:e2:4e:60:31:36:bf:60:
5f:96:d7:a1:2c:eb:f2:5e:c5:87:7c:a3:15:df:ce:6d:2b:7d:
2e:dc:ae:77:10:78:82:99:f1:79:62:84:93:dd:b5:de:2b:ce:
ab:4f:b7:4d:83:cb:76:56:8d:04:84:eb:5a:be:29:4a:c4:6d:
30:e2:eb:af:30:ed:3a:bb:01:f4:9d:9a:a4:96:31:0f:28:9e:
f6:8a:7d:dd:ac:cd:ae:d9:31:6c:70:4e:52:b4:97:17:e7:29:
db:eb:d7:34:4e:6d:e2:04:10:66:dc:1c:e4:f4:e5:5e:26:9f:
9e:c9:76:30:14:0c:e8:92:e2:a8:2f:76:84:a2:b7:f8:64:81:
cb:8b:01:34:f6:ba:35:8f:67:05:6d:7d:2a:0f:bd:ed:11:2c:
04:00:64:7f:2d:8d:c8:1e:9e:0e:a9:95:4d:fb:05:14:68:f0:
42:8d:03:56:32:41:bf:f4:83:7f:5c:05:60:bb:27:fe:51:7e:
ea:df:59:86:70:9f:58:85:8b:0d:ef:f2:8d:d3:c0:04:81:45:
3f:73:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:29 2025 by rpki-client