Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
File: PnIyBI3L0sabqyJbikIhYEbBiyU.cer (raw, json)
Hash identifier: F6v61jyfQD1gYO6KRQnBsoAoFx7ckOFD67gEc7Z+94M=
Subject key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Dec 2023 12:43:02 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 147.158.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20266 (0x4f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 4 12:43:02 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:00:e0:29:3e:18:11:53:2d:35:77:70:00:
6f:4c:b7:88:38:8f:fd:00:4f:62:1e:73:f6:11:65:
e5:03:32:ea:71:e8:ad:f7:16:b3:fb:9d:b0:8f:4f:
11:a0:1c:43:ac:67:26:71:78:26:a5:ec:c0:e1:91:
35:75:a9:36:d0:bc:2b:11:38:a3:f5:cb:44:8f:4e:
9d:01:10:d1:fe:77:e7:a4:59:ed:54:06:18:e9:f7:
c8:40:29:0b:31:eb:6f:19:14:83:31:64:2e:85:56:
9d:b9:e3:66:e9:13:8a:a5:7e:a6:d1:1d:07:5f:59:
c6:f1:0f:50:05:fa:5d:d6:08:2e:f3:ed:36:b5:91:
24:d1:9e:45:a2:68:b2:2f:d9:6b:f4:64:af:84:c4:
39:02:01:3d:ba:42:83:f5:65:e0:13:ac:d6:b0:9a:
7f:c3:e6:fe:f9:9a:10:2d:51:fc:a6:8e:66:02:b2:
e1:ee:7c:a3:fc:c2:f6:59:a6:65:1d:33:f7:2f:60:
54:01:dd:e6:eb:8f:f1:59:1a:9d:5a:61:dd:dd:25:
f6:5b:bd:59:49:ea:cc:e8:30:96:b3:3e:cd:30:a8:
d6:4b:0d:ab:87:ff:74:cd:22:6f:74:8f:9e:ed:97:
d0:75:e0:a8:bc:1c:b2:80:f2:d8:14:01:07:b7:b8:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:b8:40:1c:91:d4:aa:4b:1d:7e:f3:b7:c3:b2:fa:4b:30:89:
87:82:a5:02:e5:9f:cd:55:29:c1:48:c2:3e:6c:e8:8c:df:6e:
1d:21:a7:f4:1b:71:9c:b7:a6:d0:cf:37:34:cb:59:38:48:17:
a1:8b:ab:38:c3:6d:02:ad:b5:ec:60:bd:88:4d:38:77:80:6a:
a2:5b:3e:c0:a9:d1:34:33:85:ef:61:94:2d:d1:e4:a1:63:c4:
09:6d:52:8a:a8:14:91:af:90:ff:a0:b6:8c:8f:65:88:47:79:
c9:44:d8:b4:98:cf:63:72:b7:f1:23:a5:5f:21:a8:8a:17:1c:
26:37:ce:6d:12:9e:a4:e0:4e:49:0d:dd:6b:aa:fa:d0:34:99:
3d:07:be:fd:c0:b1:37:56:50:7c:0e:5e:92:0b:4f:f0:d2:c6:
00:80:23:3b:c5:b8:cb:fe:97:a5:7a:8a:3f:10:8b:3c:05:45:
f7:d5:dd:85:0c:d1:08:80:21:25:47:66:d9:1d:b7:a6:1d:bb:
c1:68:c3:a1:7f:2b:cb:78:0d:8d:5d:89:e9:91:2b:03:ea:74:
f1:f5:f3:e8:a1:4e:89:38:56:b0:dc:ab:c3:76:81:94:1a:82:
d3:e7:2c:e6:58:f0:4a:9b:33:76:e9:d5:67:da:01:8f:0d:17:
9c:ce:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:09 2024 by rpki-client on console-fra.rpki-client.org