Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer (raw, json)
Hash identifier: 5poWbXdDqyf0c8eph+83U4UFNIpqgIsBo44fCGLPZH4=
Subject key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5979
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 10 Aug 2024 07:44:59 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 160.25.117.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22905 (0x5979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 10 07:44:59 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:94:0c:39:1c:0c:ac:29:38:cc:88:87:d0:
d3:2a:5f:73:f6:86:a7:5b:40:f1:4f:f5:56:c0:4b:
f7:4a:6a:fc:7d:ee:72:07:e1:74:2e:a1:ec:5c:f1:
dc:81:a6:1f:49:43:91:67:8d:10:4e:8b:d3:13:1c:
63:92:5f:58:0d:f7:65:48:90:c3:04:05:9d:a3:ab:
15:d3:6c:0e:0c:60:90:75:3c:a3:3a:70:45:f2:de:
9d:dd:98:33:c4:ba:59:44:06:81:5c:94:ef:2e:f9:
3b:b5:ab:d1:57:ff:4c:c1:14:ae:20:73:62:fa:d5:
85:21:30:d4:c8:96:1b:bc:78:44:7f:7a:5b:29:11:
a7:b9:d1:ac:c3:f8:c0:d9:52:d6:18:59:54:52:49:
53:68:d7:cc:5d:d5:4c:de:24:52:2e:b7:e6:69:75:
95:5d:f3:4f:b3:26:ec:2e:ab:27:df:0c:80:fd:d9:
41:dc:2b:fc:2f:bf:db:47:79:c3:44:3c:61:2a:30:
3f:eb:a1:f2:08:bd:00:4f:a6:ce:12:fb:da:91:3e:
43:3a:fb:99:61:a2:91:dc:d0:6c:b6:5f:d6:df:d3:
4a:90:39:65:b3:26:e2:5a:72:91:18:13:2c:1f:6e:
13:b9:fc:c1:3b:68:b7:20:16:8d:c6:f3:4b:ac:0c:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.117.0/24
Signature Algorithm: sha256WithRSAEncryption
09:08:4d:72:de:63:0d:39:a4:fa:14:c8:47:bb:4b:36:20:66:
b6:af:f4:7e:70:6e:7d:5a:53:83:d4:ea:7f:38:23:0d:2f:f9:
4d:e8:fd:2f:7f:96:c8:12:4c:77:35:79:53:d3:52:01:d0:f4:
76:04:ca:52:47:38:f9:c5:3e:bc:b6:b2:a6:a8:4e:53:5b:fa:
a8:60:00:45:00:86:7d:7e:8e:f2:ec:b6:86:99:99:5d:98:5e:
74:93:63:cd:b5:0c:c2:8d:3f:9d:d1:1d:20:63:b9:20:62:e4:
df:0c:80:29:dc:11:8f:aa:f8:b6:72:d0:79:fd:3b:02:29:cf:
42:07:5b:8e:2e:51:26:a5:82:a6:e3:74:98:f3:c1:60:ae:ea:
bc:7c:65:52:80:f1:1b:b9:d8:d9:6d:7d:f6:d1:cd:c1:70:c7:
14:22:a7:3b:75:c3:c2:bc:fa:0c:ba:6b:4c:fe:4e:b4:88:de:
8b:c4:53:d2:65:34:b4:c0:06:e1:0e:82:9d:9c:bf:a6:26:79:
d5:f7:3f:d1:c9:31:2e:a8:24:e4:10:a1:46:3b:d3:87:7e:6c:
fd:38:da:a3:61:c4:2a:77:1a:e5:7b:7f:be:ee:68:d3:04:37:
78:36:9d:31:07:88:24:b3:c7:e8:34:e0:03:9a:e6:6a:a5:9c:
bd:1d:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:54:59 2024 by rpki-client on console-ams.rpki-client.org