Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer (raw, json)
Hash identifier: yf8wlXqoBOsHB5tD+Ea9Rvmvc6ZQKbjdHCon2ImELNE=
Subject key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5DCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Nov 2024 14:56:43 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24014 (0x5dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 13 14:56:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:67:e1:b0:12:2d:d7:30:86:bd:a1:9b:34:
11:67:39:e5:06:2d:b8:c6:3c:fa:c9:42:35:b6:d8:
a2:73:3d:99:89:ff:bf:79:0f:ef:bc:55:79:91:53:
ee:19:af:ad:1e:8d:be:9f:e4:41:5f:de:35:0c:e1:
cd:74:35:24:33:70:20:2a:91:f1:d1:8e:59:5e:a6:
84:59:1d:84:38:0c:03:5b:a2:55:e7:48:dc:9f:bf:
09:f6:6e:13:ae:c0:b2:41:80:90:d7:02:5f:bc:80:
6d:87:05:24:13:7b:94:41:32:d3:83:68:81:ca:a7:
c3:5b:c6:1e:0d:17:e7:dd:34:e2:54:d1:31:16:90:
cc:f1:0d:b9:27:cb:39:f3:8b:ee:4f:7b:1b:c6:1b:
67:78:26:67:50:74:ee:2f:20:dc:0b:4f:1a:81:d2:
89:af:b3:dc:7e:10:08:0b:8b:04:be:04:2d:b4:e5:
55:94:25:ae:01:11:f3:0d:9f:49:6d:51:ea:dd:34:
a1:6f:c6:50:31:a6:d5:e7:13:e7:aa:83:7e:0c:54:
09:41:cf:a2:95:d7:31:d2:5b:56:0b:11:46:db:6b:
29:e6:54:dc:ac:c5:0d:c5:e2:71:a7:f2:34:f4:b4:
25:ca:1e:07:5e:1d:8d:a9:8d:dd:f4:41:c0:5d:b2:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:4d:11:5d:bd:ad:31:5e:99:6d:62:da:21:0d:17:89:2a:c5:
0e:1e:c4:a8:7a:99:a0:66:84:c7:87:92:99:c0:db:6f:9e:02:
a2:eb:e0:df:8b:b7:49:4e:3a:78:30:07:e8:2a:9c:07:76:e4:
72:c8:3e:79:a3:bd:74:00:9c:47:ba:0b:05:38:2e:f6:5a:ce:
b6:2d:a7:3c:a6:02:e4:c7:1b:7b:76:96:73:ee:7b:dd:05:10:
4e:95:b7:e0:4b:6f:8c:7f:08:33:d1:f8:1c:7a:9d:70:a6:f0:
d3:1f:66:e5:0a:39:9d:db:ad:57:8a:76:07:fe:cc:d4:b1:d4:
74:30:0b:98:ce:d9:01:e4:38:84:78:d3:b8:d5:f7:f9:99:21:
d0:60:b6:d5:89:7e:a2:7b:ac:58:a2:0b:23:29:b2:20:c0:95:
25:eb:90:e9:09:3e:d7:d0:09:28:bd:50:b6:9e:d0:cd:70:da:
53:5c:95:da:cb:a4:70:8f:02:dd:01:22:fe:92:8c:85:27:85:
ca:93:11:27:a1:fa:0a:44:5b:70:2b:10:fb:7a:04:e6:ca:9a:
9c:de:5d:81:fa:d3:17:60:c1:c6:bf:b1:e8:e4:3a:c8:b5:cc:
b1:dc:ca:6b:39:95:07:7c:f1:13:b3:4e:26:6d:11:67:3d:14:
13:e0:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:38 2024 by rpki-client on console-ams.rpki-client.org