Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
File: REDuIbNImmUKYWsSDY5b5Xku4Es.cer (raw, json)
Hash identifier: 8cel7wF9x9yul1EE/cVTLXDuRD5maChlU7bcsvEsysM=
Subject key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 06:41:50 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 198.244.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23912 (0x5d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 6 06:41:50 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:46:7c:35:ef:ec:ba:c1:09:a7:c4:fa:88:
f3:45:18:20:54:13:db:8e:fc:a4:54:d4:c1:9a:d6:
8e:9e:49:9e:29:5a:e8:b2:e2:5c:30:11:15:ea:fc:
d7:44:b8:f6:b9:3b:ef:5a:63:81:98:1a:5b:14:2a:
a2:09:1a:3b:8c:db:3e:d7:ef:e2:15:81:1e:74:59:
c2:e3:b0:ee:08:8c:52:29:25:c4:4c:f3:53:56:3e:
49:45:3a:ac:de:bd:d4:c2:eb:f6:a1:2b:07:94:92:
3d:b1:1b:40:f0:8b:41:be:5a:d6:13:90:4f:7a:68:
89:3a:6d:4f:94:18:90:83:72:b7:5b:fe:bb:47:72:
20:74:25:a1:3b:c2:3f:06:7b:ec:a2:25:b7:74:d9:
09:82:1e:67:9d:17:ba:85:cd:a2:09:95:5d:63:7a:
bd:6f:e7:f0:1c:d3:43:ac:ab:1e:81:62:d2:04:6d:
ac:15:57:a1:92:57:7f:8e:b9:1d:91:e7:75:6b:41:
ad:0d:9e:bd:da:e2:08:0d:94:3c:69:51:a5:9c:b6:
15:b0:d2:f3:7a:89:a8:77:70:9b:60:f8:3f:60:ff:
c7:11:e6:b2:5f:49:6d:19:c9:a4:7b:77:59:6d:ab:
9a:39:4b:fb:c8:d8:b6:5a:45:73:40:bb:08:54:7b:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.244.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:be:ae:81:eb:f1:b0:5f:c9:73:63:fd:3b:13:45:dc:87:08:
ee:ba:3e:ef:b1:ba:a6:bc:52:d8:ef:93:84:46:eb:95:45:61:
09:d2:be:cf:4d:f9:6c:a7:22:3a:32:a0:70:6a:34:42:9f:0d:
f6:be:f4:32:cf:6e:c9:2a:3e:be:08:b4:de:61:d7:42:3e:15:
2e:4b:8e:75:9b:d8:9b:31:29:8d:10:9b:bd:6f:78:fb:fa:ea:
b8:f3:b6:de:58:d3:c5:21:90:a9:1a:51:1c:40:85:a5:09:8d:
30:0d:5b:e6:ef:ef:88:ea:28:5b:98:5c:0c:63:c3:5f:86:9a:
d7:a2:4f:11:6a:51:18:9a:ca:52:db:0f:ab:ab:5e:8f:04:5f:
5a:8e:09:a5:05:2f:de:fa:8c:fc:bb:16:72:34:c7:6b:65:ad:
61:c2:50:0d:5b:2a:99:d7:eb:c4:b2:d6:16:24:24:bc:9a:b4:
53:d6:5f:f4:71:ff:5e:97:60:6c:5e:3b:25:e3:ff:38:a2:34:
c9:c5:b8:a9:9a:80:0c:a4:13:d9:c3:17:e1:dc:ff:39:ce:fb:
5b:54:73:3a:10:fd:ee:d3:f9:1a:fc:77:e1:54:bf:e7:fd:b2:
02:2a:25:c0:a4:64:a6:f5:36:54:06:73:c1:58:c3:29:33:c8:
04:ee:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org