Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
File: TKAuwRGHSuDn0FVaJf8zAvkS64w.cer (raw, json)
Hash identifier: bwhroMyDEgZddAerhzTyEmy/AkwSprZzieSMLYBSw44=
Subject key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E00
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 16 Nov 2024 18:16:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24064 (0x5e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 16 18:16:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:38:2d:31:aa:5f:79:2b:9f:50:00:7c:6e:
24:1e:c8:ad:fa:b7:30:6c:65:bb:b1:3e:70:a0:f3:
d9:79:a1:bf:0d:02:46:9e:b7:c0:47:be:49:60:3e:
dc:63:a5:27:ae:92:25:90:36:12:05:5a:a7:2a:3f:
9b:e0:a6:20:38:e1:6e:d8:5b:ea:61:e3:72:af:31:
e3:fb:27:70:ec:55:c1:82:ee:73:9f:68:b4:d6:ae:
83:9e:fb:0f:cc:23:78:e5:a2:29:d9:85:1a:d8:ec:
f8:0c:b0:d4:4f:6a:6b:de:0e:26:d4:1f:b0:6b:46:
37:db:4e:0e:b7:dd:9e:05:d4:aa:b1:04:ed:8f:df:
a5:b7:f9:63:e3:5c:32:b0:c9:ca:84:9c:4c:2d:17:
67:59:80:7c:64:91:4b:63:ce:b6:2c:bf:50:a1:86:
6a:13:76:9e:ea:a2:60:a5:cb:f1:9a:17:56:fd:08:
6a:57:0e:48:a9:a0:3e:92:c7:9c:1a:8a:48:17:50:
0f:69:ca:92:65:5f:2b:ad:10:10:7a:3b:81:df:24:
c3:33:f4:d5:54:94:ac:80:e1:4c:99:d3:31:93:69:
f1:3e:70:5d:f2:ea:fb:da:0b:90:be:f7:ea:af:98:
25:7c:91:f1:67:5c:35:c0:62:9e:3e:7e:5b:7c:65:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.162.0/23
Signature Algorithm: sha256WithRSAEncryption
40:27:9b:a3:e6:48:c5:c6:5a:fb:8a:c8:9b:7d:c8:8a:74:2b:
03:94:41:0e:dc:76:26:13:ba:5c:95:91:28:de:b9:cf:8e:c2:
e9:ed:0d:91:45:48:3f:33:ba:ec:00:31:3d:12:42:88:c0:ed:
21:1b:f5:be:fb:53:66:81:77:63:20:22:8f:0b:b5:1b:e1:a8:
2a:bb:81:59:b3:47:d8:40:ae:15:54:50:9d:73:8d:72:91:fa:
de:75:86:f1:36:21:2c:0f:91:cb:38:6c:0a:7d:7f:8d:ab:ca:
1b:10:93:00:d4:2c:a8:1b:84:f0:9b:28:a7:93:c3:d5:78:18:
bc:1c:ce:ed:5a:99:1e:4f:e3:3e:0b:0e:3a:e3:7d:24:ee:c9:
f5:16:38:d1:a9:24:cb:66:38:59:d0:e2:6c:cd:5b:07:dd:7f:
56:25:cd:d3:82:e1:96:c5:8c:95:34:11:23:c0:5d:1f:73:1f:
ab:21:2f:8b:bd:37:0f:73:8b:52:64:17:8d:01:a5:87:9f:43:
87:e1:b0:95:27:67:01:7e:3d:6e:b3:a6:f0:4d:70:f6:da:29:
43:fa:15:31:c1:f7:15:34:d3:9c:9f:4a:ea:a2:fd:4c:2e:da:
b2:e5:05:b3:1b:6e:49:26:15:fd:92:5f:20:99:2e:c4:97:6b:
7b:0d:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:39 2024 by rpki-client on console-ams.rpki-client.org