Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.cer (raw, json)
Hash identifier: KFtecBfhIwxg9g+6PI80rhZXd67TvdvegeFAl7V8cbU=
Subject key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5AB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Sep 2024 00:29:04 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.16.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23223 (0x5ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 9 00:29:04 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:da:fd:4f:a3:4c:d0:d0:44:91:de:d0:c7:
7f:e2:8f:26:08:32:de:f5:34:c7:0b:72:2e:f9:7f:
19:5f:43:46:98:29:bd:0a:80:01:8e:9b:e4:e3:49:
08:7e:87:8b:4b:64:9a:9e:d2:ab:56:1c:6c:7a:39:
1e:b0:81:4b:51:b5:3a:3a:ee:9b:b5:25:e1:c9:9a:
f8:d0:fe:aa:4f:42:08:ed:11:61:7c:36:70:c8:f0:
e6:b8:dc:48:13:51:66:7a:85:ef:e8:14:c2:0a:7d:
ad:13:1d:ab:7d:74:c8:21:9a:ff:b0:66:06:84:d7:
15:9e:f0:b5:41:74:0e:f3:d4:52:af:8c:32:32:11:
c1:e8:96:4b:6b:04:81:71:8c:6c:e2:29:ce:10:88:
1e:8d:b2:63:16:08:1d:47:bc:62:8f:82:51:2e:9c:
7d:a2:08:35:32:b0:fc:d7:b0:dd:a5:6d:13:60:ea:
f8:66:9a:f8:ac:4e:6a:92:87:ab:6a:fc:ae:97:1e:
5b:89:93:42:80:c5:91:58:8b:2c:83:d7:00:23:5c:
04:15:0f:f1:ff:76:fe:5f:1e:80:33:20:f0:c1:5c:
5f:98:0a:91:15:ad:73:77:8d:11:40:18:8d:a5:3b:
36:7a:0c:4f:d7:8b:54:67:d0:e3:61:26:1f:43:8e:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.16.0/23
Signature Algorithm: sha256WithRSAEncryption
85:20:be:ef:70:41:3b:85:c3:44:cc:1e:7f:74:7d:39:ad:17:
66:19:f0:0f:96:1c:4f:6c:6e:c4:57:6d:19:f0:73:ee:a4:6c:
52:e3:78:02:01:93:7f:95:89:51:b7:10:5f:c5:1c:54:35:e8:
12:c6:b6:c1:ca:07:b0:f0:21:6c:19:8b:6d:d8:58:7b:7b:5b:
b3:4c:cf:66:29:5d:53:36:e1:f5:d3:76:2e:94:4b:ac:50:9e:
f8:92:bf:56:53:98:c1:6e:fe:fb:28:5a:b1:b3:e4:0a:b9:34:
ff:48:89:c6:5a:2b:e8:a7:41:2d:40:6d:f1:27:55:f5:e9:1b:
38:0e:68:3a:31:5d:a7:58:69:ec:1f:52:2b:e7:5a:6a:8a:f9:
25:db:b1:f4:92:9f:8f:7b:df:2c:53:8f:f5:75:f6:95:fe:f4:
05:da:92:36:a4:16:ee:66:da:c2:9e:65:f3:9c:b1:9a:30:ce:
21:ef:01:7b:f3:57:f5:54:46:26:21:96:12:b8:b2:55:e9:16:
ad:8b:00:ab:23:b5:cf:77:25:60:fc:e1:b3:a8:da:3b:0c:0b:
c6:bb:f5:9d:83:bc:c4:63:96:9c:ce:d5:09:2b:11:9a:8a:23:
77:8a:05:fe:4c:20:71:3e:48:fd:34:4a:bf:2a:a2:e6:90:c9:
07:f4:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:39 2024 by rpki-client on console-ams.rpki-client.org