Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.cer (raw, json)
Hash identifier: 1vHD6lfu1jQ9M6skZ0/CpFK64B3TzVvY6MLVax/dPDQ=
Subject key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 59E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Aug 2024 21:01:49 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.37.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23014 (0x59e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 20 21:01:49 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:d1:c5:ad:6d:43:a5:9b:35:a8:97:f9:e3:
13:0d:b5:62:2c:12:18:79:17:2f:01:36:65:72:64:
da:27:1f:25:97:e1:19:a2:66:98:f2:ed:45:ff:e8:
09:83:58:30:b6:45:33:49:c7:4a:96:be:db:be:dc:
76:18:e1:ff:4c:71:67:56:8f:87:19:69:81:6f:b9:
97:3b:c0:25:d6:7c:e1:88:df:1a:ba:0b:f7:c6:fe:
10:14:17:84:1d:14:6e:18:d5:55:6b:de:2b:92:64:
36:57:5f:27:c0:98:9b:1f:59:b8:80:6e:8f:1d:87:
66:85:c7:74:a5:9d:ff:2d:b0:71:c6:13:0b:0b:2b:
5b:b0:87:89:1e:00:3a:99:97:cf:80:d3:84:7d:78:
bc:0f:bd:7f:29:e8:7c:25:3d:26:bd:04:1c:8e:92:
64:c4:29:6f:91:8f:06:b3:e0:cd:68:ff:25:96:80:
a5:b0:a3:46:d4:bf:73:c6:0b:dd:d8:0a:e1:b6:00:
1f:af:a2:80:e1:18:24:d9:7c:aa:1c:e9:ae:ef:3d:
cb:3b:fd:6b:f3:70:e2:94:bb:6b:d5:72:55:a4:aa:
c6:e1:dc:f5:a3:dd:86:d9:94:f6:78:90:08:26:7a:
d1:1e:50:4d:26:70:6c:0b:f5:d7:4f:e1:21:5c:75:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.37.0/24
Signature Algorithm: sha256WithRSAEncryption
23:42:c6:2a:8a:b1:33:e1:2b:64:f9:ca:9c:cb:e4:bb:2f:47:
54:dc:9a:e1:90:8e:46:71:93:d8:af:48:0c:5f:35:0f:f2:0e:
fb:30:30:eb:c3:d8:13:84:03:f5:0b:04:e0:52:01:60:bf:39:
ec:c7:3e:70:3f:ed:c9:d3:de:97:63:fb:e0:20:da:51:1a:22:
48:9c:52:8a:2a:0a:94:1e:e5:2f:44:97:49:5a:d9:62:c1:07:
ce:03:1b:e7:44:49:47:50:33:5f:ca:f3:be:fe:1e:13:57:8e:
9e:1f:5a:70:9d:78:e6:58:4d:01:ed:fa:b6:6b:c8:13:57:0a:
32:a3:f0:b6:1f:4e:c3:3d:56:7f:48:6d:59:41:89:7a:52:0b:
da:a7:f6:a8:5b:04:9a:c2:89:74:00:18:e9:56:52:c3:f0:4c:
02:0d:1e:d0:f3:cd:7a:ad:9e:62:09:58:b3:46:f7:29:68:f4:
8f:d4:2c:2b:7a:2f:c1:e9:9d:c4:8b:b4:bb:d3:0a:b4:9a:58:
7d:7f:bc:23:bc:42:01:88:5f:bc:2b:f4:4a:3d:35:6c:2d:c7:
cb:cd:0e:58:f7:a3:b5:46:f3:f7:bf:c3:05:fd:44:72:db:a1:
fe:5c:57:c1:1f:78:e3:d3:80:8f:f8:ac:55:3e:ff:4f:6b:d4:
cf:a9:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:15 2024 by rpki-client on console-fra.rpki-client.org