Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.cer (raw, json)
Hash identifier: p2liDKABrbbI0M3Aq/Sir9Vgk7l4349THcBbNJCI7V4=
Subject key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D64
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 03:35:40 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23908 (0x5d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 6 03:35:40 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:f6:83:7a:0e:00:06:00:03:d5:ad:67:54:
59:54:3c:94:a8:f2:99:38:ad:de:ae:55:58:95:55:
01:2c:dc:2a:80:a0:4f:d5:bc:a5:34:7d:80:af:3c:
21:9f:e5:9d:fa:5d:83:d9:84:0d:97:48:3b:f0:32:
3f:7e:fc:e8:db:d3:81:6f:4c:01:6d:0e:89:de:54:
68:f4:65:47:64:93:d2:5b:ca:13:db:7b:31:38:be:
45:51:1b:df:dc:ac:10:e0:3e:2e:f7:71:50:2d:f6:
11:be:ed:a6:12:40:b3:f8:95:7d:00:2f:3c:b2:46:
df:5d:05:40:30:99:21:c6:4e:4d:93:9a:bc:dd:92:
07:bd:28:87:57:ff:eb:3d:7e:cb:ad:39:0a:3a:0c:
a0:d8:2c:88:54:33:e1:d6:b2:79:88:86:86:63:25:
71:80:e1:47:40:eb:60:2b:39:d8:c4:4d:b9:78:da:
81:2f:fb:9b:97:b3:b7:86:20:cf:57:a0:9d:fa:42:
5a:a2:a1:4c:5b:f0:24:5b:a5:b0:79:d7:ed:e3:f4:
88:52:7e:c6:3d:32:cd:56:91:34:c8:3f:78:cb:0a:
a2:f5:49:0c:bd:4c:f0:03:a0:7b:8c:1f:0d:1f:8d:
ba:8a:b6:96:c9:80:79:29:c3:4c:02:d9:d6:00:02:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ce:5c:a2:45:f2:2b:4c:83:96:f1:d6:89:85:47:55:a2:b5:
a8:15:32:bf:72:bc:11:cf:eb:a8:a6:86:d3:96:83:7c:a7:f5:
ee:2b:9b:f8:ed:fe:79:6e:14:3c:4f:88:75:70:28:ef:0d:6e:
ea:00:4a:db:d4:1d:7e:bc:84:4a:9d:66:c9:e7:5c:6c:4a:0b:
ba:ff:95:83:c0:a3:35:6a:a5:ae:25:8f:6b:ed:d9:51:a8:63:
d4:75:74:dd:79:4e:24:88:f3:20:b0:79:9c:38:a6:e2:a1:a0:
a4:0d:18:50:86:08:35:07:fd:e2:92:77:8f:92:78:69:51:ba:
52:f9:85:05:27:01:c4:10:ab:ca:e8:81:e4:a5:8e:1a:5c:53:
47:b5:fa:41:b8:ca:8b:fd:98:97:e8:07:f0:c5:7f:bf:b9:f9:
7a:00:22:f0:c4:a6:6c:13:16:ac:d3:16:f4:9b:e0:b0:af:e1:
fb:f9:58:c9:d1:2c:af:10:07:9e:a1:1f:85:31:b7:8e:4a:3c:
ea:9e:9f:d7:62:4c:16:c7:87:9c:4f:eb:d8:c7:e3:8b:69:3e:
26:68:3f:c8:2e:65:d7:96:3c:ad:4a:10:07:ca:64:57:7c:43:
4c:6b:79:61:14:4e:48:21:43:5c:ae:43:1f:42:76:58:9c:e9:
a7:f1:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org