Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (raw, json)
Hash identifier: iHD6ERSrpRQVfm6TZQH+K39HqoU46WYLFl695g2wBwI=
Subject key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5843
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Jul 2024 22:49:27 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 155.205.0.0/16
IP: 198.51.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22595 (0x5843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 15 22:49:27 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.0.0/16
198.51.211.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e2:94:29:53:94:5e:85:dd:9c:b0:a8:50:15:2d:fb:13:c4:
aa:d1:1e:6e:5b:ba:bc:92:b8:d0:44:cc:29:d5:bb:a8:93:a1:
5b:a3:7c:4f:8e:7b:1e:f9:29:58:a4:78:74:ad:ba:f2:25:68:
e3:58:34:21:4b:04:10:86:ec:7f:e8:d5:90:0d:d0:f4:c9:2e:
77:9d:48:87:9d:ae:6c:61:32:fa:a6:9e:ff:8d:bc:b6:83:83:
be:4a:75:e7:4e:ac:02:0c:d4:54:8e:57:ec:fb:32:e5:0e:4f:
0b:e5:e2:4e:67:ba:b8:70:4d:94:e3:05:ae:f5:c2:46:cd:24:
73:aa:84:d8:4e:8c:96:8c:1c:b0:8e:dc:ab:be:6f:20:2c:97:
3e:36:6e:27:50:b2:93:77:9c:c2:6d:dd:03:74:39:40:7e:b0:
81:ca:16:d4:a4:ae:b6:b7:a8:ae:92:fb:7d:f3:eb:64:07:69:
07:fb:85:e9:b4:28:18:8e:b4:53:46:2a:10:b4:35:73:d1:4a:
33:1f:31:22:c2:95:bc:fa:36:ed:b8:4e:68:1a:1d:19:c3:39:
cf:3d:03:1e:4c:a7:3b:9d:4e:cc:b7:57:2a:cf:99:a6:fe:c1:
e8:60:9c:a4:d5:2e:56:d5:a1:87:a6:10:23:c4:23:50:4d:ba:
0f:27:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org