Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.cer (raw, json)
Hash identifier: 0ocRrTShHEGcnzdZ+NRVycEr+BOuJwLek5+Wo+fVFts=
Subject key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5182
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Feb 2024 16:24:40 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 130.102.0.0/16
IP: 192.12.76.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 17:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20866 (0x5182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 1 16:24:40 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:c7:14:2c:8b:98:a4:05:5f:56:0b:25:73:
05:ef:cf:44:81:50:d6:d9:34:e6:dc:c7:6a:17:e8:
14:f7:52:f7:58:eb:4e:62:58:6e:0b:a9:62:97:39:
f6:cc:3e:5f:35:f5:45:b9:f5:35:de:22:97:24:98:
dd:9c:8f:cb:e9:0f:67:d3:e2:76:7b:d1:b1:2f:e1:
a7:1e:4f:fa:eb:f2:ef:1f:e7:66:b9:4f:c5:a3:6e:
f7:45:36:37:61:24:97:d9:95:bb:25:d3:79:bd:5a:
47:a2:9d:77:d8:9a:c6:6c:f5:4c:62:60:b8:e0:9c:
46:21:bd:f5:6c:f9:d6:dd:77:5e:8c:ef:5a:b1:bc:
87:09:b3:dc:50:6e:d3:cb:6a:e7:71:53:50:6e:0a:
64:45:7e:5c:ee:09:aa:bf:17:5b:53:26:d6:14:48:
07:43:18:34:af:c4:fd:1a:57:be:55:fe:f7:64:ae:
ce:73:2e:09:d2:9c:02:ff:e2:ef:fe:31:3a:c8:c0:
c9:2a:0b:b5:71:a1:2a:a9:c1:bc:42:e6:49:dc:f5:
14:8b:6d:dc:47:af:fa:af:0a:4f:3b:ff:c5:16:88:
88:55:ae:0d:df:22:35:e3:2d:a2:22:2c:7f:6a:b4:
87:5c:56:c0:c5:0d:96:b8:92:fa:13:d2:3d:7d:ce:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.102.0.0/16
192.12.76.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:97:0d:6d:c9:1d:b6:d9:57:10:18:59:0b:12:90:1e:9a:dc:
a1:48:9e:57:d0:c7:23:d6:10:d7:95:20:d4:d8:ec:70:98:ed:
c9:2f:dd:8b:77:82:37:cb:ff:d8:e2:e4:bb:44:92:0a:1f:c9:
3d:05:f7:24:c3:63:a7:8e:c3:1a:c0:ac:fb:50:11:d8:aa:db:
30:38:36:c6:61:8f:ab:f8:9b:5a:f4:34:75:81:eb:69:16:fe:
43:3b:0d:b5:b9:d2:a3:65:8b:cc:9b:a0:74:df:ad:41:ac:f5:
22:96:b4:52:8c:a3:3c:44:2c:4f:41:9a:c9:4a:5f:e2:80:79:
d2:89:ff:53:8a:6a:66:53:77:9b:d0:b5:88:ae:89:5d:a7:16:
b5:df:fe:75:e4:38:b8:61:7b:cb:59:07:46:4d:cb:f7:e1:e9:
43:4e:68:a6:ed:e7:28:db:4d:aa:c8:c5:f5:3e:ad:09:e2:4c:
f9:b6:68:97:f1:97:ab:8c:48:f5:2c:79:7d:ac:8a:23:08:79:
9b:c6:d3:5e:13:e4:59:5a:5a:df:49:3d:d7:bc:c9:70:8c:db:
a8:d3:af:d1:a5:d3:a0:ea:61:10:07:ba:4f:92:78:3c:e6:ad:
b9:d9:3f:68:ad:c9:a6:7e:3c:4a:c1:3d:76:8b:8f:88:b7:a9:
80:46:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:27:05 2024 by rpki-client on console-fra.rpki-client.org