Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
File: PgzfiCrujHIh1YijxSYBjh1kyWg.cer (raw, json)
Hash identifier: 8TcHRCFIVJXHr3duI3eGA6OcMMMk6xQJlFwIuEXeH9g=
Subject key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5012
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 08 Jan 2024 12:09:23 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20498 (0x5012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 8 12:09:23 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:4d:70:46:ae:ae:3a:5b:54:4f:47:7a:ee:
ca:65:55:62:c1:cf:86:74:b4:55:80:a5:b0:39:88:
53:b6:11:e2:34:8a:be:b1:fb:f3:72:73:70:87:e4:
82:b9:07:b9:38:36:d2:07:e1:93:8b:e1:23:04:20:
92:85:24:55:e8:0f:f7:a3:dd:c9:b8:f5:1f:8c:7e:
ee:21:91:c5:b5:ae:0c:62:cc:33:6c:19:74:b6:d6:
79:31:a0:d0:f9:ec:e9:c7:55:ea:cf:81:fa:0e:a9:
7e:f5:03:7d:34:31:56:f2:3e:32:32:b1:dc:5a:ca:
52:67:4a:59:1b:f4:f6:c7:8c:c5:56:9a:45:7f:27:
b8:3d:84:0c:70:31:51:5f:f2:ba:ec:97:ca:bb:13:
72:46:70:34:ca:97:79:eb:f1:1c:29:74:2c:76:1c:
3f:91:c2:c2:61:c9:8e:51:00:fb:dd:64:e7:e9:38:
32:f1:84:9a:23:51:55:c7:5a:62:16:9b:74:c6:e0:
84:48:6a:5f:3a:c9:08:42:6d:a8:7a:2a:d7:82:ba:
80:a8:d6:9c:cb:4f:d3:f8:74:c6:e7:28:ff:55:94:
43:f9:50:a1:5a:d9:17:50:e8:d7:92:32:f8:39:c2:
41:e1:02:0c:a3:35:a2:13:60:27:2c:0b:db:65:32:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:4e:4c:cb:08:67:6d:f9:c4:46:5e:41:c0:ed:6a:13:41:59:
46:77:de:2a:fd:3a:fa:f9:46:50:fc:a5:87:bd:85:cc:e2:b1:
5c:43:3d:5e:bf:29:1a:a4:aa:9e:b3:0d:28:1f:7e:ae:9c:dd:
3d:46:cf:63:1a:bb:3c:d5:8e:ab:7f:ad:fa:e0:41:12:75:b5:
9b:ed:6b:e9:ba:76:b5:c9:bb:aa:6f:f0:72:9e:a4:e9:5c:99:
bf:b4:8b:12:e4:40:1d:72:01:79:29:0f:2d:4f:bb:30:6b:11:
3e:66:ca:4f:aa:a3:30:75:94:45:2f:57:f3:90:de:00:99:9f:
10:50:f5:58:e5:9a:23:99:6a:cd:ba:29:de:e8:96:ca:ad:a1:
b8:87:ef:87:62:d7:75:00:13:cb:74:55:bc:06:e5:e6:cc:8b:
6c:03:e2:1c:ca:73:87:d0:7b:f3:10:f4:ec:f3:25:7a:46:57:
b6:a0:1b:f3:c5:c1:1a:bf:54:01:2f:03:19:7e:cd:b7:09:7a:
67:3d:63:ac:2f:31:5c:ab:17:9d:6d:7b:8d:54:c6:e5:ab:95:
40:10:f1:43:18:7b:fd:43:71:a9:56:a9:b0:27:b6:8c:1b:fb:
60:d2:47:a2:28:81:d7:46:93:c0:cb:69:31:a2:d8:24:48:d8:
76:15:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:32:39 2024 by rpki-client on console-ams.rpki-client.org