Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer
File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer (raw, json)
Hash identifier: LvXKy5x6F8ij3zGPtuWe/xsDQhaWffAfkIbnf+VEEcg=
Subject key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D7B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Nov 2024 01:59:55 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.194.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23931 (0x5d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 7 01:59:55 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91EA409/serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:3e:a8:aa:67:66:99:76:67:c4:21:07:51:
80:8d:f2:1d:76:ea:d9:0e:ef:f3:e1:de:3d:d2:bd:
09:fb:b7:4f:5c:93:04:8f:d0:b6:43:ef:83:6e:ee:
29:94:33:81:d9:0c:8e:42:a2:69:3a:fc:ee:18:f3:
06:1d:b5:d9:24:cd:5b:71:ec:62:3f:a9:0f:3a:c2:
2a:29:da:b9:ba:2d:51:9c:0c:2c:ee:b1:28:e4:02:
22:fe:84:99:94:76:a9:8f:f8:9d:9a:5a:49:04:1d:
70:3c:7c:1e:c1:86:e0:ae:67:22:9a:fa:7e:71:d4:
16:f0:f4:f9:03:28:4a:b6:7b:13:5c:67:55:a1:33:
c9:44:ff:86:b2:16:31:26:6a:e3:28:70:b4:37:82:
d8:12:ce:e6:70:5c:54:c1:d6:1b:cb:0b:ce:44:41:
a3:f5:0b:28:ba:f0:3f:91:12:e2:77:c2:e4:a8:44:
da:09:c9:46:45:05:64:4f:a5:45:28:2e:4e:65:5e:
28:b4:d5:14:5d:f0:e6:af:e1:c0:d0:fb:cf:d5:9d:
35:e1:49:83:5f:33:f2:d0:0a:e3:5a:72:97:e0:0b:
a6:a0:b1:72:38:63:cb:cf:57:5c:16:e3:e3:70:7f:
69:04:86:ba:79:4c:b2:0e:37:83:d0:c7:ea:5f:68:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.194.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:68:bc:cd:33:b8:15:7a:a2:04:c8:05:29:0a:a9:19:f8:94:
ed:ef:eb:06:90:96:b0:ed:25:f4:d0:fe:f0:76:8e:61:0f:6d:
90:4b:be:8b:e2:1d:72:a4:42:58:9d:b7:0f:aa:0d:9c:05:c2:
78:c6:b3:99:43:14:cd:81:d1:a2:61:d5:89:2c:e0:7d:f6:c0:
cc:df:d2:8e:59:75:33:96:a1:18:4a:e2:d7:95:82:f0:d0:0a:
df:7f:8d:e1:c6:8c:d9:bc:48:f5:ec:f0:b6:2f:d8:d0:25:eb:
78:5c:3e:31:2a:9a:53:19:ac:2e:af:e7:0f:81:0b:82:93:69:
77:4f:6a:7b:78:54:38:ef:9b:da:46:c4:57:b7:c0:20:99:38:
d7:88:95:73:04:70:8d:a9:69:92:aa:a5:00:15:9a:5e:62:77:
d7:80:e6:11:f7:d0:3c:07:34:e8:32:04:46:47:7b:89:dd:bd:
65:eb:dd:76:c3:e8:48:73:c2:de:8c:c1:06:8a:12:90:a8:c6:
23:9e:8d:2a:2f:4b:02:98:17:35:71:4a:83:01:32:39:87:e1:
b6:20:2d:3d:fd:90:ec:4f:23:5e:97:78:0f:10:ab:87:7a:4d:
69:21:4e:d6:f1:ce:4a:4f:ff:d2:ac:d0:80:1a:9b:59:6b:dc:
51:dd:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:39 2024 by rpki-client on console-ams.rpki-client.org