Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer (raw, json)
Hash identifier: YNfkdYejufOahx6GT1nKRggOVRdoHNxphHciUd3dkNE=
Subject key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5799
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 02:01:19 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22425 (0x5799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 3 02:01:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:4c:de:97:74:16:81:7e:92:20:49:91:40:
3f:5f:88:9a:56:ce:7f:c4:ab:16:3c:71:1d:f9:59:
8c:00:4a:dd:46:e4:bb:34:06:76:27:5e:8c:39:d4:
a2:1b:7c:48:1a:7d:c5:e7:05:8d:bf:81:bf:e1:08:
43:28:dd:c4:f2:4e:cb:9b:39:7b:32:41:9a:6b:5c:
f8:80:ed:ba:a2:b8:16:f8:cb:da:5c:49:86:1f:8f:
d7:0c:8a:ad:96:89:b1:e7:bc:a9:5e:96:9b:64:db:
f6:2d:d5:fd:ef:2f:81:f9:1b:ce:e1:86:a3:fe:95:
74:07:28:f5:54:a0:20:e7:7e:60:7d:14:3d:4f:46:
6b:47:7c:a0:e9:a5:63:8b:1d:44:54:31:f8:c0:9e:
a0:37:f4:94:f2:9d:84:d9:cc:15:6d:e6:79:ec:32:
55:27:40:b4:50:08:f6:99:b7:ea:d3:53:4a:67:df:
5d:46:25:5b:65:4e:c7:21:ec:3c:6f:3f:35:64:d4:
31:dd:ea:d3:07:f3:16:e8:b1:ae:c3:48:69:f7:e1:
a3:6a:4c:93:86:81:ac:f0:32:2f:8b:78:33:49:b9:
6e:39:fd:3a:02:d6:c6:95:f7:2e:88:86:89:43:2d:
21:27:c1:67:06:19:2a:cf:60:e1:54:a9:08:96:09:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:92:21:a4:c8:d2:19:bc:71:0e:01:ce:b6:f6:bf:81:71:8c:
af:c2:ce:08:e8:6d:db:48:9b:fa:59:f9:25:10:c1:77:9a:26:
fd:df:4a:3b:7b:3e:fa:90:61:17:23:e6:c7:09:5e:7f:89:84:
af:0a:bc:f2:5d:42:61:0c:d7:8c:2b:bb:5f:a0:9b:28:7d:0c:
2f:c6:06:c8:b2:9d:ea:2d:62:ed:74:20:ee:53:b8:03:43:4a:
0d:51:a9:66:5d:95:21:48:37:42:ac:6d:8b:33:cb:9e:ee:fe:
bc:bb:16:46:2f:f1:df:e7:57:40:75:c2:51:af:5b:b8:a1:58:
5d:45:89:07:07:7a:28:cc:ba:21:a8:67:73:47:ca:17:a3:25:
83:96:8e:f1:90:1d:95:50:4c:a0:98:48:8c:15:f4:45:f0:3b:
cc:8a:9a:d5:27:3b:d9:6f:c3:d1:22:39:63:5d:0e:fb:2e:1c:
00:ec:ad:48:c8:22:af:a2:89:47:53:d3:1e:2e:82:1e:6f:da:
85:b9:e5:c2:e3:58:ca:f4:4c:f7:5f:8c:2e:c1:6c:e9:4e:01:
76:12:5f:13:b4:a4:9f:35:98:23:43:32:19:14:6f:70:ce:85:
fa:6d:17:de:ed:8b:3c:71:ad:4c:71:e6:a4:de:97:29:cf:87:
ce:3b:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:25 2024 by rpki-client on console-ams.rpki-client.org