Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer (raw, json)
Hash identifier: rjj/UAjtu+xRBwJplY/C/GytxTJNoy2YCfythpkQ75c=
Subject key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 535D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 09:27:49 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 13:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21341 (0x535d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 15 09:27:49 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:af:f3:65:a5:15:95:ff:89:4a:f7:3d:6c:
64:e4:de:bf:eb:64:b0:64:67:a9:8f:13:24:52:81:
f9:14:b6:49:11:35:a2:6a:da:d1:6d:37:bc:11:20:
fe:bd:24:12:d3:bc:1c:61:41:8a:77:7a:c0:20:12:
a5:04:d6:59:76:0a:f7:64:d4:8e:cd:f5:9b:2a:10:
b0:de:73:a3:f1:eb:53:3d:dd:46:56:b4:b2:69:1d:
24:82:6d:7b:85:34:6a:2a:62:2e:12:11:ab:b3:fc:
bc:e9:19:46:92:88:d0:31:84:e7:f2:70:36:89:a9:
7c:88:80:f6:60:8e:c2:dd:14:38:bc:d0:44:1f:b2:
6a:d2:40:0e:bc:7f:48:26:b5:fd:13:58:0e:cf:3d:
66:14:e8:2c:cc:ef:cc:ee:ed:b6:ed:c7:fc:b3:ac:
57:7e:fe:97:d9:e0:7c:0c:94:36:6c:62:3a:45:b6:
a6:bd:13:c4:89:0e:a6:7b:f0:4d:8d:65:c8:23:56:
de:51:a6:4f:76:36:2e:3f:fb:0b:5c:98:d1:70:66:
17:8b:ba:ba:d9:97:e7:78:f4:1b:34:71:5c:e4:92:
8d:28:97:8c:56:e4:c3:66:a9:15:bf:f6:ae:18:73:
de:8d:b8:34:f0:07:c9:2d:55:ed:3b:e0:c9:3a:d3:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:97:c8:b1:78:15:ae:3a:55:80:89:f5:6a:d0:59:26:81:b1:
c6:0d:78:f7:81:df:2d:5b:8f:ab:26:63:97:89:4e:b2:ec:ad:
30:10:64:de:50:cb:e6:f8:ee:aa:e9:c9:e0:a0:3e:ef:c5:fb:
a1:1f:14:0b:9b:33:2d:9a:cb:2a:de:45:13:1a:a8:e0:64:e5:
f5:a1:6c:b4:83:58:7b:b5:bc:1a:96:92:ac:55:cd:a6:3b:a9:
d6:f7:e4:35:48:11:97:6c:1c:43:d5:b6:72:a8:4d:95:72:bb:
70:ce:f2:df:44:67:90:7d:51:6e:08:77:e7:e6:80:71:aa:8c:
91:18:f6:f0:5e:24:b3:de:2f:1a:d2:7b:45:50:b6:f0:42:48:
cc:c0:32:e8:e3:71:cf:5e:6f:df:96:83:98:1f:9e:2b:f7:8a:
55:88:b8:20:ad:49:3a:a0:b7:73:34:8e:8d:75:60:c9:ef:21:
76:fe:88:00:c4:cf:e7:20:b5:47:bf:77:82:e2:f6:15:d4:c6:
32:ba:70:2e:5d:a2:17:8a:cc:4b:51:a3:76:e4:b3:0c:bf:11:
9e:a6:86:93:d7:41:23:f3:07:b7:ba:3e:bd:98:c5:c1:8f:cc:
01:51:16:c7:6f:81:30:c4:8b:e9:ed:8e:a7:05:f2:e5:61:eb:
06:c1:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:52:46 2024 by rpki-client on console-fra.rpki-client.org