Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
File: Iln4cJbkCts8hBgOKLVsPogi9lE.cer (raw, json)
Hash identifier: 6oJDSc22dOGA2ZrKjcb5rghiMjo4ch2C0DfFg8WcJoQ=
Subject key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5AA6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Sep 2024 06:21:25 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23206 (0x5aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 6 06:21:25 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:e5:85:60:7c:e3:d1:c7:4a:17:00:f3:e6:
45:dc:38:2c:c8:e8:52:dc:3e:18:a4:22:23:19:3b:
ac:a5:65:03:d1:b1:4e:42:b8:52:14:3b:76:b2:6d:
67:cc:b3:6d:ec:c3:57:ff:20:0e:1d:13:12:a9:85:
f7:d1:29:0e:ad:f8:7f:04:52:ca:44:c8:01:29:86:
24:11:0d:14:47:42:3b:d2:73:f6:d4:84:15:9f:4a:
c6:8f:d7:9a:fe:6d:45:fe:33:9f:4c:9c:08:5d:0e:
cd:51:bb:09:7e:85:78:36:a1:0b:a4:60:5f:e7:9e:
de:b7:b2:df:25:77:da:c7:5d:e3:3a:2d:64:17:4f:
17:99:a0:dc:b6:00:a7:da:6e:00:37:5c:9b:76:48:
53:c6:0f:b2:01:26:e0:0b:32:dd:12:d9:1f:26:95:
f2:44:29:98:bc:99:70:02:c2:63:78:21:c4:8b:e3:
d2:ff:35:60:8f:b9:de:01:14:b5:c0:78:c1:9b:9a:
41:89:3b:b0:5c:0c:e7:12:ae:db:af:4f:77:a7:aa:
22:99:28:9b:6f:42:66:88:29:a9:54:ce:33:e5:5f:
53:c6:35:58:3d:f7:21:ef:35:f8:da:54:dc:3a:4f:
f5:3a:91:00:aa:29:ef:81:61:0c:31:ec:0e:84:2d:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:50:0c:6b:ef:8a:af:db:06:bc:d1:04:3e:ba:2b:d9:a8:8d:
ec:49:ea:9b:2a:ab:0f:30:28:38:0a:73:1c:e0:19:cb:7c:57:
a2:ad:04:83:56:de:e0:66:2a:68:01:20:98:20:90:b4:40:57:
37:31:c8:56:5c:65:60:95:a2:8b:c7:84:3e:41:49:92:cb:1a:
bf:dd:ee:f9:e2:bd:02:e0:ae:0e:0a:78:21:02:38:3c:63:4a:
12:27:66:ed:04:38:51:57:64:1d:95:96:08:6b:cf:12:69:f1:
b5:33:c0:94:c1:38:09:af:e9:f0:53:f6:d5:6a:a2:e3:e9:84:
b6:33:2e:d2:2a:c3:7b:91:2c:5d:47:87:98:81:f2:65:64:0f:
1d:2d:a3:bd:c1:26:4d:33:23:72:1d:f3:07:7a:b5:ae:ba:fa:
94:10:95:ba:36:8a:18:61:a1:e1:e1:d9:ba:08:03:76:e7:f2:
52:d8:6a:a1:49:61:d1:7b:c2:9a:96:ce:ae:64:10:cd:2e:30:
95:29:0b:50:2f:b1:68:8b:7e:d9:dc:81:ee:fd:14:eb:16:02:
fe:79:17:3e:d8:89:f5:94:24:3a:a8:6e:82:7d:5e:87:f4:b8:
01:a4:80:48:83:96:7c:b5:d0:ab:30:d3:66:94:72:20:03:ab:
c4:7e:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org