Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
File: BdNlUA2kssABifPGyllQ4AdMfEo.cer (raw, json)
Hash identifier: mZ0tgHW0QfUczKWllF3UkR9B4ZX++xEbDU1wulmCuaY=
Subject key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 16 Dec 2023 20:05:05 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 152.65.192.0/18
IP: 199.247.160.0/20
IP: 207.66.112.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20338 (0x4f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 16 20:05:05 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:67:86:e5:94:16:42:fa:a5:33:13:3d:d4:
f4:02:04:45:15:af:53:d0:10:6c:9e:d8:d6:e2:eb:
0b:0f:c1:60:1c:42:7a:f7:b7:62:ad:c8:be:35:87:
f1:66:0c:fa:8f:4e:5e:cd:cf:0f:ac:54:cd:a4:48:
31:67:39:b3:ff:08:ec:54:1c:e1:b6:09:d8:26:82:
10:ac:8f:2a:99:64:23:2f:fa:13:36:b5:db:cc:66:
e9:23:26:c5:b1:7e:05:63:9d:28:24:6f:5f:91:ad:
55:5d:ad:c9:27:91:f2:24:ca:0f:4a:49:ae:b4:ee:
13:f8:e4:c8:01:41:cc:11:8d:c8:b3:fc:54:74:bd:
28:29:34:34:58:2f:e8:25:a7:c4:81:4f:d1:6f:99:
96:43:64:e6:17:82:c4:74:7a:69:f3:d1:10:58:32:
6c:fe:c6:48:4a:95:3c:0a:2f:c5:63:24:b0:ca:11:
85:dc:55:4a:5d:51:7d:2f:10:68:80:0c:fb:c2:6b:
bb:7b:8e:80:b0:3c:dd:35:64:74:2c:3b:aa:ac:41:
3d:05:2d:9b:25:b6:77:c3:e1:22:93:ca:88:5a:55:
e7:65:66:cd:79:d5:bd:78:6e:8d:0c:3e:94:4f:96:
ef:b9:99:e0:b4:85:36:2b:c8:5f:b0:a9:55:7b:80:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.65.192.0/18
199.247.160.0/20
207.66.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:5f:8d:b7:66:0a:5c:bd:45:c6:27:64:1e:b3:ba:48:c4:d3:
06:1b:c8:8a:9b:6c:64:5d:5e:b8:a5:6e:4a:27:35:e7:26:60:
58:1a:c9:88:ae:54:4f:a7:89:10:7a:ff:f1:f3:91:e4:75:1d:
32:27:54:91:b2:88:86:12:a4:4b:cf:67:28:e3:90:f9:6a:d6:
f8:35:df:62:a2:91:2c:81:37:59:a5:93:2e:5f:07:de:1c:1b:
44:89:a4:4d:a1:40:01:00:b6:f7:96:ec:95:74:12:95:10:da:
eb:5f:0a:e8:ea:c6:9e:12:5e:07:4b:b4:37:51:42:80:c7:26:
f5:27:42:25:a7:4a:71:70:62:82:1a:49:11:0d:03:63:58:e0:
e5:ee:9b:ba:e5:ca:2f:e1:d4:e8:28:0b:dd:10:e4:d2:b0:25:
99:2d:f4:6e:9f:2a:11:10:bd:aa:20:15:5f:e5:31:b1:a3:2c:
43:bb:18:bf:91:12:21:94:15:bb:94:e5:43:04:82:95:16:64:
e3:de:04:fa:8f:14:5d:f7:8c:82:c1:1c:e7:40:6e:fa:ae:ba:
74:60:31:15:77:e8:e9:8c:f9:92:f2:6f:3f:cd:38:dc:37:5a:
ae:8f:58:f5:ff:ff:2a:21:de:55:04:ff:7a:d1:c7:e9:98:0d:
99:1c:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:11:18 2024 by rpki-client on console-fra.rpki-client.org