Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
File: JCq5H6fHpkrOd9m09mHijAsVuOA.cer (raw, json)
Hash identifier: M6pJtoM8MLyl7ZCuGR0ZajuOIhLrRsBXPj6uaInafBw=
Subject key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5771
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Jul 2024 10:34:42 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 160.25.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22385 (0x5771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 1 10:34:42 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:ac:ba:c3:8f:43:61:41:b7:41:5c:59:b5:
64:66:cb:a2:e3:17:5a:32:13:cc:7b:be:64:cc:bb:
91:dc:f6:d7:89:eb:f9:63:bd:13:4a:70:74:77:30:
cb:e2:90:21:93:83:a5:f1:ac:6e:a4:4d:ee:f2:94:
fa:5c:23:aa:60:1f:a6:33:55:34:77:95:ee:a7:16:
88:68:17:80:42:bd:20:15:71:30:55:d8:98:5f:cc:
97:5b:9a:36:b7:6b:3c:00:e6:d0:1d:d1:83:94:37:
88:21:7d:a3:eb:49:19:bb:60:fe:bf:12:c3:92:e8:
62:cc:d1:98:f6:71:5b:e9:1a:68:da:2b:4b:f7:f3:
34:39:63:68:ad:d8:e1:a0:df:8a:8e:28:60:49:e6:
80:eb:2a:da:90:a4:9e:8a:8a:37:59:08:90:0d:37:
75:76:77:94:37:6a:6b:d0:fd:f9:63:2e:7e:80:04:
40:24:1b:d6:2d:36:4c:d9:8e:fd:77:f4:43:ce:29:
dc:36:8c:96:09:d5:0f:62:ff:84:30:f2:b9:16:65:
73:1a:ea:67:ee:54:71:8f:e3:59:19:9e:8a:5e:08:
e7:6e:f3:4b:1f:3e:b8:8a:e2:f9:2a:87:b1:5a:fc:
00:e9:ef:25:2a:01:1d:0c:f1:86:32:a3:95:a0:a5:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.4.0/23
Signature Algorithm: sha256WithRSAEncryption
49:eb:22:c7:9d:24:a6:4d:2a:c4:0e:97:d3:a2:c6:2a:59:2c:
03:0c:96:49:10:21:bd:f8:95:fb:0b:86:5f:ae:2f:77:b8:9f:
f4:72:ce:ae:9e:c0:41:1f:28:e2:53:f5:08:0d:d8:31:89:1c:
3c:9a:69:b7:0f:d1:66:c2:68:66:e2:13:ea:56:4d:22:d9:9e:
ca:fc:74:a8:38:2f:e5:5d:d1:9e:18:0b:5c:73:2d:ad:18:9b:
6c:65:db:af:4c:e5:4c:c7:31:89:37:57:3b:b2:44:4c:76:28:
67:44:ae:19:bd:92:45:fe:21:4a:0a:6b:89:78:0a:39:83:87:
c6:8c:8c:32:37:d7:4f:a0:8c:af:45:98:72:7e:83:82:fd:b3:
e2:6a:26:2a:5f:b7:26:dc:93:21:f1:30:19:10:27:46:14:14:
5d:6f:1c:e1:17:c3:da:d5:d8:80:ed:6c:5c:ca:4b:2f:a5:2c:
77:da:30:9a:f6:16:b2:4b:5c:2c:3d:f2:b6:ee:fe:7e:7d:3b:
3a:78:2d:de:1c:e8:81:4c:ab:fb:21:d6:fe:dd:d3:60:8b:f0:
2d:6c:be:80:c2:26:f9:4e:ee:88:45:23:8b:01:1d:f9:be:9e:
98:7a:4a:f7:a9:be:ac:78:a1:9b:23:42:af:20:93:f9:e0:b5:
02:d5:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:24 2024 by rpki-client on console-ams.rpki-client.org