Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer (raw, json)
Hash identifier: Vcdp43fmCkkOmH6AHGoobO3WjILUyPCVbi4S51eYsH4=
Subject key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5638
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 May 2024 10:04:12 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.18.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22072 (0x5638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 30 10:04:12 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:e3:77:10:73:e4:bf:cf:d7:86:f8:f2:ff:
fc:7c:eb:dc:5b:29:35:3d:e9:49:ca:62:ec:13:79:
ab:50:8f:2d:5d:03:5c:38:73:6e:1e:86:6e:cb:e6:
50:81:9e:54:38:06:7e:b4:4b:1f:54:67:ef:e2:64:
98:e7:5a:2a:22:9c:ea:31:07:65:6a:d7:63:c9:ca:
c6:01:f5:43:fb:cc:75:7e:4e:9f:eb:4c:0d:77:87:
f8:9d:a8:01:53:e3:7d:80:03:62:14:38:fb:b5:09:
e3:4b:bb:27:d0:10:f4:4c:14:c8:dd:03:10:db:1d:
c7:d8:10:50:bb:3a:85:75:a6:29:69:f1:3b:26:36:
5a:bb:16:13:86:d4:70:66:a8:07:a2:e0:aa:9d:22:
b4:d6:52:d4:ce:bb:20:a9:2c:3b:aa:92:f4:6c:31:
f5:97:56:ad:c0:89:f0:79:86:75:c3:c9:c9:28:82:
b7:47:9e:a2:24:9c:d1:60:ad:b9:0c:47:69:6b:ac:
cd:25:3b:3a:2f:21:cf:20:10:f0:2e:ca:5e:b0:56:
a9:7d:41:ac:d5:aa:17:13:c9:05:46:50:d6:fd:27:
e3:c0:64:0b:51:6f:d2:ee:3a:66:4d:3e:a7:c7:45:
9c:23:f8:07:f4:f0:4a:c0:08:e4:13:b0:ed:36:34:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:81:6d:a3:c9:64:52:1b:2a:85:a4:44:4a:a1:b1:15:de:9c:
7a:0b:d2:24:83:05:1b:9d:39:68:28:46:a3:35:98:85:6a:81:
25:a2:8a:81:5f:a8:94:cd:1d:df:94:e8:b3:1b:71:09:a2:fa:
d7:b7:42:43:f8:dc:14:bd:59:ba:38:9b:9e:ed:25:88:ab:c4:
09:f2:3e:dc:02:b8:09:36:a7:a5:d7:ee:29:70:c6:83:5a:6f:
a8:29:1d:6b:fe:35:3d:6b:0c:d5:72:9a:45:c4:5e:73:ed:1d:
29:a1:36:28:0e:48:8a:5d:ab:c0:3f:e1:c9:31:06:1c:c7:5f:
f3:ef:98:b9:3a:65:c7:a7:72:b0:ef:0e:a2:6c:c2:bd:ea:b0:
9e:9e:72:b6:e9:b7:25:f2:d7:06:50:2c:a7:d1:46:4f:e6:58:
de:f8:6f:3b:cb:b2:64:76:60:f3:8f:7d:05:ac:7c:a2:2e:c9:
4a:8e:f5:c0:5e:0b:1e:7f:07:a1:87:4b:92:f5:fa:66:08:d0:
dd:74:ee:c2:76:73:df:a9:5a:8f:19:3a:9c:c6:59:0e:57:d2:
ed:75:08:5a:76:cf:8b:c4:c9:c7:30:5a:55:a5:4a:a2:e7:db:
a5:a7:ec:1a:d6:56:6a:44:1c:7d:07:9b:03:96:ed:26:7d:54:
e4:95:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:25 2024 by rpki-client on console-ams.rpki-client.org