Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
File: PnIyBI3L0sabqyJbikIhYEbBiyU.cer (raw, json)
Hash identifier: MfWH6lktOwMhaPidqoVbCkpkgURiSWKZescuTNjhJII=
Subject key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 12:57:04 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 147.158.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23892 (0x5d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 5 12:57:04 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:00:e0:29:3e:18:11:53:2d:35:77:70:00:
6f:4c:b7:88:38:8f:fd:00:4f:62:1e:73:f6:11:65:
e5:03:32:ea:71:e8:ad:f7:16:b3:fb:9d:b0:8f:4f:
11:a0:1c:43:ac:67:26:71:78:26:a5:ec:c0:e1:91:
35:75:a9:36:d0:bc:2b:11:38:a3:f5:cb:44:8f:4e:
9d:01:10:d1:fe:77:e7:a4:59:ed:54:06:18:e9:f7:
c8:40:29:0b:31:eb:6f:19:14:83:31:64:2e:85:56:
9d:b9:e3:66:e9:13:8a:a5:7e:a6:d1:1d:07:5f:59:
c6:f1:0f:50:05:fa:5d:d6:08:2e:f3:ed:36:b5:91:
24:d1:9e:45:a2:68:b2:2f:d9:6b:f4:64:af:84:c4:
39:02:01:3d:ba:42:83:f5:65:e0:13:ac:d6:b0:9a:
7f:c3:e6:fe:f9:9a:10:2d:51:fc:a6:8e:66:02:b2:
e1:ee:7c:a3:fc:c2:f6:59:a6:65:1d:33:f7:2f:60:
54:01:dd:e6:eb:8f:f1:59:1a:9d:5a:61:dd:dd:25:
f6:5b:bd:59:49:ea:cc:e8:30:96:b3:3e:cd:30:a8:
d6:4b:0d:ab:87:ff:74:cd:22:6f:74:8f:9e:ed:97:
d0:75:e0:a8:bc:1c:b2:80:f2:d8:14:01:07:b7:b8:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:24:db:42:62:77:99:f6:41:20:0d:f3:9d:75:15:42:01:55:
e7:4c:2b:62:23:ba:b8:e9:61:81:e7:5e:7e:e2:90:55:c4:32:
f6:47:a0:e7:58:db:74:40:2e:e4:37:f4:f0:7b:32:8a:4c:5a:
38:e9:02:18:cc:2d:b9:37:81:03:cd:e7:fd:3a:be:8e:89:22:
8c:6d:c7:10:5c:52:f6:3d:a1:1c:4c:51:35:f8:87:f5:ab:7f:
9e:95:0e:05:14:86:b7:61:f3:84:11:e7:92:c5:0d:88:23:70:
8b:21:3f:19:85:61:7d:2c:21:ea:ef:d8:7b:1e:1b:2f:85:79:
41:a7:1e:04:69:b8:76:3e:21:02:8a:d7:65:c1:3c:04:93:2e:
7b:8e:77:5a:77:b7:eb:55:1b:c5:62:a2:fa:1b:79:1a:b5:80:
e2:48:00:c8:73:47:28:37:e6:23:cf:0b:e7:c9:70:77:70:7d:
fe:19:49:b8:32:05:42:93:a9:20:bf:7d:8c:fe:85:e6:e2:a7:
24:78:0f:1a:60:75:67:12:ba:e3:05:43:fd:2f:ce:2c:f4:3d:
f7:38:df:5b:1d:f9:d9:e9:53:92:18:2a:fc:b7:8a:9f:b4:ad:
f5:ba:0a:81:59:00:06:5c:f9:24:30:93:dc:c2:e5:3e:01:ca:
c9:f8:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:39 2024 by rpki-client on console-ams.rpki-client.org