Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.cer (raw, json)
Hash identifier: aUko5690NIA5S9O/6mdAfS8sD/8q6JrfOR37EvLldaw=
Subject key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 52D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 02:35:17 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 144.218.0.0/16
IP: 169.201.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21208 (0x52d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 1 02:35:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:64:f9:4e:d8:e8:e3:e4:4e:84:84:69:50:
6c:a7:aa:a0:de:22:5c:c6:15:b9:26:cd:22:6a:3e:
a2:f6:33:5c:96:6c:e1:ba:e6:68:6f:5f:7f:00:f1:
8e:b0:3d:c0:94:36:a3:66:68:8d:47:fd:e8:36:2a:
39:1b:ce:5f:02:94:56:5e:47:43:8d:74:b7:e1:95:
75:cf:37:12:15:96:82:b1:4f:0e:8c:c9:f1:d3:f9:
72:ba:1f:fb:ba:67:02:c3:84:f6:75:ce:3a:8f:ee:
0a:67:d1:50:ac:d1:63:dc:bf:8d:42:b7:c1:8b:4c:
e8:37:d8:40:67:af:1d:96:13:9d:00:26:27:c7:40:
51:59:7a:fb:39:31:f1:a6:ad:6f:d1:8f:a8:f8:54:
32:7b:c3:50:b5:d4:35:ac:ac:4c:66:3c:29:f3:bb:
13:2a:d7:81:e6:5f:d1:02:c7:ea:64:91:3f:2a:9d:
15:8d:37:c5:7f:50:10:d4:1a:5f:23:ef:09:4d:1c:
14:68:42:2f:3a:cc:23:62:6c:d8:38:53:c2:a5:49:
60:32:9f:f3:93:68:69:1b:eb:ea:6a:4c:f2:5b:f1:
45:e3:c5:83:0f:48:b2:10:a6:7e:a3:cf:ef:d5:ad:
04:7c:16:a5:b5:a6:bd:06:81:4e:e1:70:61:90:57:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.218.0.0/16
169.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:96:9b:e7:b0:be:ea:f9:23:7e:03:f8:e7:e0:af:41:81:aa:
9d:f8:81:02:51:d8:e1:27:c0:aa:9e:eb:45:a3:2a:1f:d8:ce:
20:43:33:fe:86:07:c9:a2:5f:87:98:f5:01:35:73:91:04:68:
5b:7b:1f:64:66:b9:58:03:3d:96:1b:ea:f0:5c:5d:ac:43:d1:
5f:ff:7e:c9:fc:19:f2:24:2e:a5:95:31:b5:02:8a:e1:bb:8f:
62:03:39:92:cb:57:7d:51:67:89:1c:ff:5b:59:d1:51:76:81:
77:c2:93:0e:dd:12:73:91:70:51:29:88:df:54:92:b7:d9:fc:
fe:b3:2c:29:f3:94:a1:b9:7a:4e:76:b5:81:1a:ff:c9:0c:19:
f8:3c:aa:ea:56:2a:55:5a:f5:da:8c:fd:cf:d5:27:9e:a0:52:
c8:cd:ac:89:e3:73:b7:7e:d8:b5:68:9f:48:a8:0a:51:fe:32:
04:0b:7a:8e:c0:4d:5e:76:bf:9c:9d:a1:01:97:59:27:2a:ce:
a5:6c:bd:0a:31:67:a8:f5:e5:81:02:73:db:cc:cb:32:6a:0a:
88:02:23:7f:da:6b:14:c0:16:8d:bc:24:a1:d6:74:0a:19:e0:
c9:4a:65:7f:3b:01:1a:dd:3b:38:a7:a8:25:bd:c3:97:85:14:
f2:63:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:39 2024 by rpki-client on console-ams.rpki-client.org