Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
File: CC8e6S_qY3P9odWuxG4vLYrorIc.cer (raw, json)
Hash identifier: OS8UiPKclbOzRtYgS/PEJd7qFkEmWOpifTq6ytUBXFo=
Subject key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 57BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jul 2024 04:12:47 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 164.100.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22460 (0x57bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 04:12:47 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:9a:08:7b:d3:75:be:2a:a3:48:ac:8f:45:
1d:3f:76:7f:ad:75:27:53:a2:88:fc:db:17:29:9c:
2a:31:e0:25:6a:d8:94:27:d3:b2:eb:4f:80:b1:27:
18:0a:82:d2:b1:66:db:c2:d7:a9:27:cf:a6:ea:58:
7a:07:b3:ce:1f:9e:a4:fc:0b:4d:5f:ee:7a:b9:7c:
7f:d8:fb:f5:31:f6:98:52:14:5f:c2:80:04:e0:a3:
9d:2a:87:1b:fa:68:90:63:d0:c1:9c:15:92:3a:9d:
95:59:4c:7a:49:cf:97:3a:d7:fa:a7:66:56:8f:09:
1c:60:37:17:b9:72:f7:1c:8a:bc:0a:a6:51:e3:fe:
cb:a4:cf:bc:ab:db:3e:06:6f:f7:29:3f:ae:e9:2c:
f0:a8:2c:e5:13:8d:00:4c:25:3a:50:b8:70:f7:45:
b0:6b:3a:7c:50:c8:4e:3f:42:d0:61:43:d9:9f:39:
6a:03:a3:8b:01:fc:36:47:eb:0f:85:b3:ff:ee:a6:
42:72:f4:6b:cc:dd:e2:17:98:e0:fa:f3:32:fa:a0:
c7:9b:1b:bf:94:07:8b:23:4d:7b:dd:31:6a:73:5f:
e6:a4:1a:68:63:ab:d0:ce:48:11:5a:9d:6a:cb:ec:
6b:10:93:89:e9:0c:35:d2:b9:f3:95:b1:8d:c4:7e:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:e1:8c:5d:e8:7a:2e:bf:49:8e:72:35:ae:40:28:cc:ca:94:
a8:f7:d7:b0:a3:90:b3:ee:a6:fb:5c:33:71:4c:f6:60:7b:04:
bd:d4:38:ba:99:3b:fa:f9:c7:e6:9d:c8:40:79:3a:6b:56:5b:
db:bd:20:bf:84:df:41:03:fd:b7:1b:f1:37:2d:6f:8b:99:34:
6a:a3:36:bd:67:9f:2c:6a:da:0a:df:ba:cf:5d:25:b7:1d:4c:
f8:f7:61:6e:0f:bb:00:57:84:c1:59:6b:63:b0:cf:db:fc:2b:
9f:40:75:47:c6:80:d5:9a:36:01:72:ea:c6:ea:60:f9:f2:1c:
97:28:c6:16:f7:79:0f:a4:f8:ea:d1:e8:95:70:20:41:ec:41:
c8:b9:44:c7:70:df:f5:ff:74:31:8c:69:92:0d:39:3b:40:a8:
e0:66:b0:82:2e:91:c4:de:60:cb:17:c8:5b:48:29:f4:7a:4a:
19:73:1a:46:42:52:af:95:01:52:9b:d5:f7:70:04:90:35:9a:
96:89:2b:93:2a:ed:ae:3f:4b:1b:d2:36:a9:db:b4:33:1a:b9:
24:1f:27:20:45:77:04:81:db:17:c0:d8:18:e7:4d:1a:04:1a:
e6:9e:a0:97:34:ea:b8:89:c9:68:88:a8:38:36:bf:b1:1e:3f:
a2:0a:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org