Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer (raw, json)
Hash identifier: 9LQVMgThqHgLDw+GXSLcj1vzZ+dMVFD6nWPaTCLJrfw=
Subject key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jul 2024 09:05:11 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22688 (0x58a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 19 09:05:11 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:b0:64:ac:6b:0a:62:e1:37:18:03:4a:53:
80:0a:34:76:72:60:c2:19:dc:d2:db:bc:fa:bd:fa:
89:1f:69:c3:45:9d:c4:c4:f8:2c:d5:27:fd:54:cb:
c9:23:d3:b9:46:74:2f:17:37:e4:e3:46:cf:2a:92:
65:a4:67:d9:d4:70:3c:da:e7:ba:58:c9:ce:ce:37:
15:aa:9c:9e:93:6e:ea:39:c2:9e:1f:a6:b2:5c:19:
e2:bc:9c:02:d4:ed:10:34:27:0b:87:bd:a6:f9:d0:
6e:d6:bf:bb:33:f5:17:e8:36:59:c9:48:69:c4:19:
63:cf:b4:a2:61:6e:dc:6e:dd:8b:13:66:1a:53:9c:
15:1a:d4:04:40:11:fc:42:c1:9a:39:43:8a:a2:a5:
bb:98:72:02:6e:a5:4a:fe:53:fa:9c:71:43:75:b5:
45:d4:03:e4:e7:7b:ed:db:83:ee:80:e3:f9:08:e5:
47:2d:67:e1:a4:37:7f:62:ee:75:69:c4:20:71:0a:
98:a9:56:57:5c:90:92:17:14:4e:15:9b:e1:ba:ef:
e3:9b:76:86:6e:98:9d:26:83:6b:b7:59:46:9c:e8:
d1:44:e7:87:9b:da:36:a5:b6:ec:57:69:70:e4:31:
42:d4:ab:59:95:c8:3f:6f:10:62:db:70:76:97:71:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
43:24:20:20:72:08:0f:a8:7a:dd:ea:71:36:46:98:2a:aa:79:
18:98:0e:41:b6:39:d8:ca:8b:44:36:7f:b8:6a:da:28:cd:ea:
ee:a7:dc:05:c7:b0:e3:8d:57:7e:f2:bd:1e:5e:8f:c9:9a:03:
66:16:1d:e4:15:5b:1c:9d:b9:08:86:c6:2c:8a:ec:35:d7:cb:
5b:39:78:58:aa:d5:c0:c0:c1:2f:70:bb:92:95:64:20:72:d7:
ad:06:c5:97:e6:ad:68:bf:68:52:99:0b:0f:1e:ce:31:7a:f8:
9c:8a:3a:6c:d4:f7:69:be:a9:fb:75:4d:0a:7d:7d:f7:96:69:
2f:b3:c6:2b:92:ad:bf:79:3b:e4:1f:ac:a2:cb:1f:aa:1c:f7:
3c:0e:98:5f:f3:e5:4d:ec:1b:8a:79:18:33:46:87:9f:74:d4:
ae:70:57:fa:b2:1a:03:77:2a:a1:0c:cc:c4:40:25:96:b7:45:
88:cc:f7:7d:96:be:01:2d:e0:58:58:6a:6f:58:a2:a9:c7:be:
99:df:55:c2:3b:c0:50:35:7c:06:41:a8:2a:62:56:f4:db:28:
71:b1:e0:c2:43:c3:6b:c2:52:eb:bf:eb:da:77:5d:09:a0:6e:
74:82:c0:43:a9:bb:02:a1:e6:b6:21:d5:32:82:5f:5b:ef:db:
20:5c:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:24 2024 by rpki-client on console-ams.rpki-client.org