Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer (raw, json)
Hash identifier: MzaMayv1wwAEJd8mZZht432SjyBpqWGhJ/4qjTeyoKE=
Subject key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5B2D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Sep 2024 14:53:35 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 139.189.0.0/16
IP: 139.200.0.0/13
IP: 140.75.0.0/16
IP: 140.224.0.0/16
IP: 140.237.0.0/16
IP: 140.240.0.0/16
IP: 140.243.0.0/16
IP: 140.246.0.0/16
IP: 140.249.0.0 -- 140.250.255.255
IP: 140.255.0.0/16
IP: 144.0.0.0/16
IP: 144.7.0.0/16
IP: 144.12.0.0/16
IP: 144.52.0.0/16
IP: 144.123.0.0/16
IP: 144.255.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23341 (0x5b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 20 14:53:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:2d:33:1c:8e:9a:6c:a7:33:e8:7c:74:89:
c8:48:7e:ab:ff:3d:8f:0d:47:86:7c:67:36:26:44:
35:fd:89:fa:f9:96:0f:2f:9d:c6:14:c5:a3:3c:83:
3d:22:0c:07:d3:6d:0a:b4:47:e8:39:64:23:5a:f1:
7c:9f:4f:e3:4c:7b:3a:48:cc:23:0b:4a:c4:02:86:
b9:dc:d1:84:7f:e6:4c:87:6e:b4:83:42:7c:e5:c7:
29:b0:f2:9b:5b:18:c8:f1:51:28:87:22:6d:4c:10:
49:bc:f4:67:7f:a9:24:fd:2f:c5:36:61:cd:b7:fb:
13:2a:4b:a3:0a:29:92:83:a5:65:4e:91:00:cb:6e:
90:13:05:42:f7:fb:07:22:2a:79:8f:b1:b3:5b:7a:
21:1e:38:37:44:34:ce:77:23:51:86:46:75:6a:13:
77:65:2e:0d:56:98:48:34:27:a9:ae:13:4d:0a:1d:
2f:3f:fa:78:5c:05:c5:d8:ef:28:9d:8f:fb:c3:d7:
ff:74:d2:f3:ea:3d:bf:72:3e:49:bf:e5:14:9b:e9:
08:08:aa:5f:46:5a:6c:04:13:8b:f8:6d:81:9d:2d:
84:b9:ef:44:2b:d2:03:44:62:85:77:96:27:84:9c:
78:99:01:3c:21:e8:79:0d:43:27:2f:30:4b:e7:4f:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.189.0.0/16
139.200.0.0/13
140.75.0.0/16
140.224.0.0/16
140.237.0.0/16
140.240.0.0/16
140.243.0.0/16
140.246.0.0/16
140.249.0.0-140.250.255.255
140.255.0.0/16
144.0.0.0/16
144.7.0.0/16
144.12.0.0/16
144.52.0.0/16
144.123.0.0/16
144.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:75:6e:e8:a1:de:37:6c:0f:5d:63:2b:f1:62:7a:25:32:17:
e5:f5:da:2a:f0:38:26:a1:22:61:e2:47:40:13:02:b1:a2:3d:
c7:4d:d5:b4:9e:7f:d7:c5:2e:de:a1:0a:3b:57:1b:ad:4e:fd:
d4:3f:b7:e0:e8:28:b5:ec:a7:81:bf:f4:c9:c4:d5:5b:14:03:
7b:a0:00:a9:09:7c:29:25:db:10:90:0c:a8:27:8b:59:d4:ae:
81:cb:22:64:d7:95:4d:eb:fb:2e:84:47:15:43:18:81:3d:a8:
93:c4:2e:43:02:a3:4b:6a:2a:62:c0:14:c5:eb:a8:d0:2c:af:
7e:5e:42:38:85:68:9b:af:40:71:f3:b9:fc:18:17:88:d3:0e:
00:72:08:93:78:d9:97:bb:96:2c:01:36:dc:4d:3b:c9:92:80:
33:d2:bf:e1:5d:e4:16:06:70:f4:29:ef:87:ed:0c:50:96:48:
ee:2b:c1:8c:c5:34:9a:66:3a:83:42:e4:b8:94:e9:eb:24:35:
5e:1b:b8:55:59:9a:42:5a:6b:e1:75:cb:d2:a6:21:b7:bc:eb:
26:b3:37:8d:b5:d5:4a:5e:00:ac:0b:11:2e:28:da:31:59:f3:
f5:26:6e:8f:ec:fc:d1:50:56:81:7b:22:a6:82:2d:99:25:7a:
cf:ac:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:40 2024 by rpki-client on console-ams.rpki-client.org