Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
File: Fp97ebHLC9YNnChOysqKz1dZgFE.cer (raw, json)
Hash identifier: WgsrngqN2MV6zF8q2CXc/cUxnUfszFeA+2VH0z7SJHE=
Subject key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Nov 2024 05:23:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.52.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 17:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24120 (0x5e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 22 05:23:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:5b:7b:bd:b1:ce:03:65:91:fc:12:25:9d:
05:ee:e8:be:15:01:a3:46:1d:cf:b6:c9:3d:87:07:
e5:eb:6a:1d:6f:db:e0:3a:d0:89:37:f7:11:ed:3e:
a8:e1:98:a6:49:c0:6a:ca:d9:a3:98:26:1d:0a:24:
e3:69:12:2a:98:23:21:28:23:24:b9:19:51:18:cd:
42:f9:0c:7c:db:db:a6:83:9c:a6:b1:e1:d3:21:ba:
35:8b:4e:5a:98:e8:69:eb:31:97:ae:f8:88:ba:6f:
95:7e:60:3d:aa:1d:82:37:26:b3:d0:e1:7c:4a:eb:
40:24:a0:18:4a:05:f2:dc:28:fa:fb:4d:1e:69:f6:
30:57:32:75:20:ac:f3:24:a2:c9:0f:71:49:22:bb:
d1:13:47:e2:1f:0c:9d:a1:40:db:84:32:e6:eb:74:
83:5f:18:12:bd:97:a1:fd:e6:09:1a:20:cd:51:21:
ae:7d:96:84:20:9b:02:87:1d:22:61:77:09:c9:86:
f5:8a:92:15:9e:cc:78:23:23:ea:21:43:a1:a1:01:
97:05:42:f8:8c:3b:55:ec:38:0b:31:0a:ae:2c:ac:
19:e3:4e:a3:23:1a:b3:8b:2e:13:58:75:ae:c6:6b:
05:1f:ee:95:e2:82:ce:80:76:f6:5f:11:af:98:cc:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:31:22:19:81:a5:a9:b6:8d:65:7d:d7:f2:60:7b:db:1b:21:
fd:b9:a8:08:bd:94:3f:ba:62:2f:52:e9:5f:18:37:52:e0:55:
15:5b:a0:47:5b:e9:df:ad:e8:83:a6:d4:0b:7f:15:c1:f6:79:
b4:88:09:b4:3e:33:2b:41:4c:a9:75:df:87:78:7b:c7:cf:51:
fe:01:f0:c3:e0:95:45:07:85:52:41:9c:36:3c:61:c4:09:b4:
4d:ed:97:ca:51:70:0b:f5:4f:aa:b8:4a:61:e2:f7:f0:d4:ea:
d3:a3:1b:16:bd:15:5a:6a:0d:d0:2c:11:cf:44:b9:82:d6:a2:
53:e8:d6:fd:e0:f3:c9:31:f6:1d:1b:61:bb:78:d1:7a:ab:b6:
d7:0b:85:a9:c3:d8:7f:9c:00:14:20:7a:04:e6:5d:90:32:46:
de:68:39:8c:e8:92:4e:05:da:92:bd:0c:44:4b:77:e4:78:f8:
be:ea:77:0d:81:67:5a:27:45:33:80:47:57:c2:42:6f:e4:9a:
67:b4:87:40:fe:f2:8b:f2:00:ad:63:35:72:79:f8:a3:fc:62:
39:0f:fc:91:bf:49:2c:05:9a:e4:45:9b:68:10:89:dc:f5:bb:
c8:0c:1f:6c:11:1f:57:ee:36:4c:70:05:94:21:4b:55:f7:ce:
16:af:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:50:48 2024 by rpki-client on console-fra.rpki-client.org