Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
File: 5CANRK2dbstocvZTqVhD-yfYR6Q.cer (raw, json)
Hash identifier: AtCKaX/aM6tMGD2Cv8SkMGRjPG+z4V0gaqDrxFyz1YU=
Subject key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Dec 2023 06:22:43 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 192.107.113.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20381 (0x4f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 27 06:22:43 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:47:e6:9f:54:28:69:9c:af:80:42:e5:07:d5:
79:d8:31:73:82:d6:89:36:5a:cd:1a:0b:21:a5:a3:
84:9b:3a:79:b9:66:2e:14:ca:01:24:cb:6a:69:39:
53:35:6e:5e:97:64:a1:cd:14:13:91:19:bb:33:84:
04:ba:85:46:82:e3:b1:ae:f4:84:fc:42:ec:59:28:
7e:06:dd:bf:1d:a1:84:10:cf:6d:ad:00:2e:4e:38:
28:32:27:f4:35:cd:f2:50:6b:e6:66:c3:ba:b6:25:
a3:5c:b7:b9:03:81:0f:7e:8d:d6:e0:aa:e6:0a:93:
c3:ce:44:58:dd:14:02:02:ce:4c:43:48:46:dc:36:
b1:cb:64:eb:68:ba:75:f3:8e:fe:89:c1:ed:5b:08:
02:97:c3:6c:87:73:1b:44:fa:d7:59:49:6e:b5:54:
e8:c2:05:5d:38:b9:44:64:12:f6:e9:f8:24:18:93:
9c:9a:bd:86:06:1b:ac:2f:30:5c:04:5c:db:16:83:
cb:84:88:69:7f:1d:2c:fa:f2:d2:3d:bb:17:3b:df:
d0:13:ae:32:33:75:46:de:63:14:1f:12:63:82:e0:
c3:3a:00:0e:c1:f7:08:70:20:98:fb:4b:f2:1e:2d:
1d:df:78:38:ba:5f:60:23:94:e0:ac:1e:1d:18:c9:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.107.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1d:62:86:31:78:58:3c:8a:43:ae:0a:2a:1b:35:5c:bd:9e:
d8:ee:df:a0:9e:21:a1:7e:4f:d5:bd:09:25:73:12:27:5f:d7:
c4:02:70:26:35:93:0b:e6:6f:67:e6:1a:5d:b4:3e:5c:37:ae:
d7:48:9e:38:f4:b8:7a:39:e6:49:ad:25:4f:98:a2:5e:b9:ec:
75:24:50:5e:a8:56:73:3f:c2:aa:6d:c4:a9:16:66:dd:ba:77:
e0:09:8b:80:f6:0c:8c:b8:a9:93:31:ba:74:8e:e4:fc:db:fa:
8f:2a:0d:02:e4:c7:6e:e5:b4:e6:c4:34:81:5d:8b:33:c8:ab:
3b:c6:ff:14:7e:b1:b9:bc:0d:11:80:66:cc:47:46:cb:9e:27:
4b:bb:70:07:24:1d:17:05:05:69:21:1f:9c:f9:23:f0:13:7c:
35:db:81:4b:ab:27:c0:45:ee:d7:0d:63:db:b1:88:49:f0:e9:
16:c5:6d:f6:07:b1:a8:aa:f7:75:2d:15:eb:c8:87:6b:54:e5:
12:2a:57:7c:dc:44:85:62:6a:a9:5e:e1:2c:df:56:0f:df:63:
2b:6a:92:d4:1e:3e:ba:bb:40:f3:b9:67:c0:93:84:7d:b5:a2:
94:f2:94:e7:6b:ee:45:3f:1c:9f:b5:11:b3:ab:e1:87:9c:2f:
cc:0e:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:57:35 2024 by rpki-client on console-ams.rpki-client.org