Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
File: 67mxD9JPdAljNjwtk1eAidsN5_U.cer (raw, json)
Hash identifier: G6/zRjGRTiCzVK8fu8LLZYk1HlmEkPdMqBDMDs5pM3A=
Subject key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Aug 2024 00:50:51 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 192.207.119.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23061 (0x5a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 27 00:50:51 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:dd:ba:ae:1d:fd:23:46:75:a2:c3:43:cf:
9e:9a:bd:4a:ba:3a:1c:f3:f0:ab:25:b5:67:9c:65:
17:c6:e0:20:7b:46:de:c1:bc:20:b7:87:b4:b4:16:
38:da:ca:9f:91:25:8a:96:b4:8b:d6:93:2c:c1:f7:
76:de:e7:79:06:d3:47:2f:ef:96:e9:0c:f1:56:4e:
22:72:c6:a7:a5:44:99:2b:58:01:c3:2b:63:05:c5:
11:91:9c:c8:b5:94:3b:40:67:b1:f6:ee:d8:47:00:
f5:ab:1a:e4:3b:43:30:51:45:5d:0f:25:ba:fe:a9:
fb:74:99:94:20:d0:59:bd:53:c0:cf:fa:56:74:48:
51:e7:58:fc:de:18:8f:d2:fd:38:37:43:9e:c1:dd:
1b:a4:08:d7:c2:f1:da:20:e9:28:05:37:9a:f1:cc:
4f:4a:ab:6c:dd:7a:92:3c:08:40:8d:bf:67:4d:3a:
c8:46:50:97:ba:0b:4e:1a:78:11:08:78:88:06:99:
85:12:c3:99:9f:37:b5:01:0f:3f:18:7d:d8:bb:03:
b1:20:85:a4:2d:94:13:e9:b1:9f:52:7e:55:37:33:
20:7d:a7:d6:fb:80:a1:6c:cb:cf:8e:aa:02:35:d2:
9e:d4:59:3d:58:3e:30:39:aa:1e:ac:a1:02:e2:05:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.207.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7a:a5:1d:10:f8:ad:7e:bf:1a:a9:53:10:e5:48:4e:32:d2:
0b:cf:b7:e1:9f:19:c7:24:4b:af:88:2b:86:48:22:e4:4c:e5:
b7:19:18:92:df:45:b5:07:a1:fd:c9:4f:ca:fe:91:0b:6d:e5:
23:ac:b4:68:9f:75:c8:9c:1d:cc:eb:c5:e2:73:2b:a9:7e:6c:
6e:0a:b0:a6:08:d0:3d:1d:81:69:2f:59:d8:e2:66:23:2c:3a:
7f:25:f2:1a:c2:d1:6e:a9:56:a4:12:db:cf:b6:e5:0a:78:8d:
db:13:e1:53:1f:14:3c:20:66:e7:69:e1:18:d9:c9:de:16:a6:
9f:d4:37:7c:08:36:0e:63:e8:a5:e2:5f:cf:aa:f7:81:29:0b:
46:83:06:d7:86:9b:47:47:d5:1f:b6:46:66:e1:c3:7c:2b:0c:
5d:39:3e:af:b3:7b:09:97:17:f2:f4:f3:1e:c9:44:f1:16:3b:
1e:75:06:28:1e:c9:58:91:54:58:3e:0b:bb:19:40:6d:fc:0d:
dc:6a:5a:88:3c:ce:24:64:0d:3f:c7:00:75:1a:85:ba:c4:1c:
5f:bf:dd:42:e2:8f:45:42:c1:34:f8:66:d8:9d:a5:9e:02:cd:
58:17:ce:d0:96:18:77:77:b5:38:88:a6:af:ff:0a:71:ad:58:
4f:bd:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:54:59 2024 by rpki-client on console-ams.rpki-client.org