Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer
File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer (raw, json)
Hash identifier: O5+uZbl6PAdXIOw2h4UAippkL7z43rPeNmFb+Vua20s=
Subject key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4FCD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Jan 2024 17:55:25 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 96.9.160.0/20
IP: 132.147.64.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20429 (0x4fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 1 17:55:25 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:31:4e:b8:c7:f8:6b:b1:7b:e5:91:65:26:
98:cf:1e:49:80:aa:e5:9a:c0:f0:58:10:a3:96:db:
5a:70:f7:5b:cf:82:9a:06:af:ff:d7:0d:8e:48:b3:
cb:e4:85:67:2b:cb:55:b0:58:09:43:41:6b:02:82:
cb:13:29:df:c0:64:08:d2:bd:46:a8:b6:f6:5b:c4:
1b:eb:5f:77:42:15:be:72:85:d6:66:46:d6:af:b6:
25:29:d6:d7:49:c1:59:5c:d4:cc:35:bd:6d:1c:97:
86:ee:a5:2c:87:10:1b:b9:53:f6:cc:44:7f:9f:95:
bb:37:79:0c:9b:b7:00:86:f7:5c:0e:e2:0b:41:a3:
3d:a5:cf:c1:c5:f0:9d:1a:a5:a5:df:02:8f:7a:8f:
04:88:5d:e5:22:52:a2:46:a1:28:66:89:64:59:3f:
c1:11:37:c3:4a:2e:7c:46:f8:cb:ad:4d:3a:dc:20:
42:20:0d:43:43:6e:a2:15:5c:1e:2a:d2:f1:06:2a:
bb:93:ef:5d:9e:db:e6:a7:3d:c2:96:38:7b:37:91:
0e:8b:17:91:47:80:62:ff:e6:dc:eb:7e:69:98:9a:
d9:b1:58:6b:45:50:2d:ff:fc:61:79:23:d0:39:7d:
2a:d1:6c:54:8b:a4:48:20:10:f8:09:71:25:e8:b2:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.9.160.0/20
132.147.64.0/18
Signature Algorithm: sha256WithRSAEncryption
01:2c:09:40:88:28:26:35:3b:74:52:49:60:df:36:6e:d7:e1:
1c:3e:6d:66:e0:d2:35:0c:8b:8e:15:f1:f7:3e:96:3e:a3:9c:
f1:58:12:d2:ca:1c:ed:52:5b:be:5d:74:43:8a:37:79:7b:5e:
a6:b1:fc:0b:0b:04:59:f9:20:f8:36:bb:ee:ee:75:de:9d:07:
bc:c3:03:bf:17:c6:fe:f5:35:12:f8:f0:02:f5:f5:67:af:c5:
c0:91:39:63:c4:d4:29:6a:ac:fd:1e:d9:2b:5c:9d:bb:1e:e2:
65:a9:1b:68:e2:1e:38:f1:77:7b:a8:35:e3:b0:b7:c0:03:ea:
aa:6d:7f:94:ac:94:8b:90:41:63:52:11:64:42:10:29:ec:c4:
13:dd:e6:cd:9b:6b:2a:68:13:1e:94:0c:35:40:86:f8:77:79:
de:4b:12:fc:d6:39:fd:97:68:60:5f:97:cb:b0:2e:83:e4:a0:
c0:dc:bb:c7:55:e5:29:12:c4:f9:c1:b7:61:32:6b:bc:1e:f0:
a6:8b:fb:88:68:ae:62:90:55:31:7a:f6:40:3a:dc:7c:0e:2f:
e8:97:17:65:c7:19:4a:16:54:23:92:1e:38:64:2e:17:43:f4:
2d:9c:7a:04:cb:a7:16:51:72:fb:64:98:07:9b:1e:64:c0:ed:
ac:57:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:38 2024 by rpki-client on console-ams.rpki-client.org