Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
File: QeHsF957pw-MEkF3aWN3AjclGd4.cer (raw, json)
Hash identifier: qcmK5BAdt9Y8dXrDuKlJ3XJ52Dy5QpFaj0Ge4Gub0uM=
Subject key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 56DD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Jun 2024 05:41:11 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.164.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22237 (0x56dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 17 05:41:11 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:16:cd:43:a1:30:8f:a3:e1:73:55:ab:89:
9f:c9:77:02:b7:44:06:c1:54:42:46:13:1b:82:46:
5f:80:b5:1b:48:40:3e:fe:6d:cf:50:eb:74:97:19:
cc:f4:6f:6d:d1:a3:f5:b9:bb:cd:95:a5:68:9e:07:
4a:37:ba:26:6a:73:83:58:a5:d3:79:f8:d0:6a:19:
73:6a:74:7c:72:32:6c:5d:05:3f:b4:bb:fb:11:9a:
8f:f5:f2:1b:5d:64:13:76:ed:33:4a:87:6a:2d:8d:
02:2b:0b:38:d3:86:17:41:2e:49:d4:4b:4c:07:ac:
ee:64:69:6d:b9:d9:33:9b:5e:d3:3d:13:09:69:ce:
85:a7:0a:1a:4d:de:9b:59:b8:06:24:e0:31:37:67:
4a:a3:52:32:3d:6e:82:cd:24:ff:78:54:9d:ba:b5:
66:d8:37:88:ce:42:6a:06:c1:9d:40:e2:db:97:a2:
4b:31:a0:5a:59:70:4c:a1:09:19:ec:f5:56:a3:12:
62:12:ec:12:08:d6:63:54:5f:8c:0d:23:49:54:83:
01:0d:8b:49:7e:f6:6b:4a:e6:23:37:55:ce:47:90:
72:e9:2e:66:12:ac:96:b9:48:a6:18:d7:95:4d:28:
fd:59:68:76:8e:84:c8:77:94:fa:1c:d2:cd:7a:73:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.164.0/23
Signature Algorithm: sha256WithRSAEncryption
13:76:3b:2e:4c:e4:bf:5c:1a:84:88:25:67:44:0e:05:b3:26:
b2:50:87:d4:3d:56:8b:db:4c:76:34:57:d7:78:82:ee:71:1d:
8e:3f:4c:b7:79:f5:ca:08:9d:50:48:40:0e:a1:e9:de:0e:d4:
ef:d1:e1:fa:49:b6:8c:3f:ab:64:f6:18:ad:bd:8c:17:54:d7:
ab:c0:22:dd:c4:b4:a3:88:73:40:a8:d4:bc:55:ea:36:4b:a1:
41:10:ec:21:67:d8:67:97:06:54:4e:e6:ab:08:60:23:fd:4b:
c6:a9:10:59:30:c7:30:bf:70:a4:6f:27:1f:67:75:6c:f9:6b:
da:0e:27:96:84:7e:d2:a5:66:bf:16:1d:05:2b:3b:dd:c1:5f:
13:ee:59:85:5f:84:cd:26:2c:a1:c8:50:aa:6d:0b:89:43:62:
7d:de:0b:cd:f0:42:50:9f:fc:3e:58:dd:7a:71:02:39:5b:75:
93:2c:e0:5a:a5:42:6f:07:e3:e0:a8:d2:8c:64:3d:a8:c9:95:
09:2a:3a:4e:85:20:d9:89:c4:c2:dd:31:10:d9:b5:e2:aa:57:
5e:a8:b4:2e:83:48:f0:6f:4a:c1:eb:e3:c8:a1:d8:08:ed:f3:
7b:ca:24:95:c5:24:fc:18:fc:a6:49:a0:6e:5f:b3:43:39:c0:
e1:96:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:25 2024 by rpki-client on console-ams.rpki-client.org