Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer (raw, json)
Hash identifier: k5okb6gNcarju5ND3eUZIdiKLwTDcslrRgkLL0xxTDE=
Subject key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5EA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Dec 2024 06:23:03 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jan 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24233 (0x5ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 1 06:23:03 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:32:a8:fa:65:ed:69:d3:67:83:27:15:e1:
d1:21:8e:25:d4:90:af:6e:df:e9:eb:c6:94:9d:0d:
81:6c:7e:6b:70:50:eb:0c:e8:1e:0f:c9:bb:80:a5:
5e:56:d2:53:f1:64:c2:3d:3f:10:aa:88:5c:25:74:
49:35:1d:d7:9f:03:77:5f:57:71:0a:76:fd:5d:76:
0b:5f:c5:2f:e3:0c:b7:41:a4:8c:2c:d6:6f:b4:1a:
c0:ad:59:72:84:f2:ca:84:37:c8:30:f6:99:5a:87:
75:1d:25:af:a7:53:a6:7a:5f:b2:64:f5:b1:e3:57:
59:02:f5:f7:f7:eb:0b:74:e8:84:90:c6:bf:96:41:
89:00:c3:e4:dd:17:3c:cf:01:84:9b:88:67:ef:c4:
42:04:64:98:d4:d9:05:e3:8b:70:1e:79:3b:96:27:
ee:35:71:0c:eb:6c:3b:88:2b:0f:e4:1b:7a:f7:0e:
ef:41:8a:94:a1:86:5c:78:16:d6:5e:09:a3:16:8d:
24:8d:4d:f2:6f:dc:ef:4d:5d:8b:81:f0:cb:2e:07:
86:bf:1f:6e:37:9b:29:44:4c:2f:17:64:61:fd:d6:
da:44:e3:78:25:02:36:5a:e9:60:be:6d:d1:85:79:
c9:49:ab:65:18:5e:8a:1e:31:9c:95:08:61:d1:b5:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cb:22:4c:3a:5a:98:12:bb:ec:f7:6d:04:af:7f:0d:e4:24:
5e:be:8a:9d:77:9f:1a:f3:ae:9e:87:05:5c:8d:14:28:32:f3:
10:fc:11:90:69:a4:d5:3a:9f:ca:ae:76:99:aa:d3:f5:fc:7f:
ca:56:2c:6e:e2:47:3e:c5:81:a9:61:6d:d0:ee:b0:6d:e6:a2:
d1:26:7e:35:68:b5:83:98:fd:ce:8f:c3:75:a6:ca:0f:7d:c4:
34:03:0d:d6:04:09:de:5b:12:71:a6:1b:3e:b0:e2:0c:7a:b9:
0a:16:42:4e:03:0e:a5:69:3a:f6:10:14:06:76:58:b3:91:a2:
05:32:32:f4:42:ae:39:40:82:5b:dd:b0:af:31:c7:3d:09:15:
6c:a2:c2:37:0f:9a:69:b5:92:aa:42:8d:35:c0:01:e3:64:2e:
ea:c0:55:c9:c7:11:f3:b2:a1:94:87:3b:e6:f1:36:bf:82:69:
e9:17:64:c6:66:d6:3d:e1:1b:08:50:b1:a3:41:26:ac:52:da:
82:eb:1c:4f:94:b8:dc:83:9e:d5:9b:0d:dd:7d:a4:fa:58:80:
e8:56:c0:b2:dc:76:c1:c5:0b:84:76:1c:8b:16:dc:4b:bb:bb:
af:f6:47:3e:ab:06:ae:01:74:bb:30:d3:02:9d:2e:13:0c:60:
0c:64:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 29 04:58:00 2024 by rpki-client on console-fra.rpki-client.org