Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
File: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer (raw, json)
Hash identifier: fpyZs+AWjvK1Lri9QS5StOKsnd0WNNcamlPatzPY5KQ=
Subject key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A97
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Sep 2024 07:46:27 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23191 (0x5a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 5 07:46:27 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:cf:36:85:8c:56:f5:fd:9c:ed:e6:51:e5:
ab:24:8c:29:8d:98:be:39:b7:13:27:d9:a5:3f:f0:
2f:fe:fb:93:df:34:50:37:b1:2e:92:e6:58:bb:e7:
16:e2:17:d1:75:a3:49:03:5f:8a:75:61:93:54:d4:
3a:e0:68:ec:47:63:6c:57:15:89:36:dc:ea:41:b0:
1a:7b:d9:fa:c5:90:73:3f:64:cb:1d:e2:65:45:a3:
83:78:59:e7:1b:7b:e2:79:96:3d:70:4b:f8:43:00:
5a:0a:dd:71:e9:63:dd:63:83:f0:4d:83:92:2c:82:
76:f5:b8:7c:a4:be:71:f5:9b:60:8d:fc:6c:82:6f:
c5:8b:a3:16:b8:d0:c9:1c:c6:79:78:53:69:cb:9e:
78:6f:c8:2b:95:22:51:00:0a:43:58:30:92:46:e3:
5a:86:5b:8d:69:88:d6:b1:7a:9b:47:35:e1:52:63:
7b:22:5f:8f:3c:4b:12:3a:c8:f3:71:bc:4a:18:fd:
75:36:17:b0:fa:c4:ae:48:33:c5:00:e6:65:1f:db:
f4:d2:4d:a1:e3:0e:0e:6a:50:f3:ee:4a:31:90:64:
21:b2:f8:d0:d5:6d:6e:d3:0b:51:e7:43:3f:82:ee:
e8:a1:09:1d:b6:e1:49:bb:fc:62:cd:16:68:f1:c4:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.128.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:24:6d:d8:84:2b:15:32:5d:db:28:d5:8d:4d:bd:99:d9:93:
8d:dc:ee:36:53:42:99:f7:6d:f1:8c:de:32:21:15:1f:15:c0:
64:14:86:b0:99:16:8c:f7:5f:fc:f0:53:d4:bb:a9:fe:64:9c:
64:b6:af:12:30:53:17:28:67:65:32:fc:32:fe:e4:52:ff:fa:
34:12:18:a9:1c:a2:97:58:d1:cb:bd:50:a4:07:01:5b:96:f0:
eb:e0:99:d0:45:0c:e5:e6:df:3f:90:1f:b6:60:71:10:70:5a:
c3:3a:da:35:bd:4a:a9:c8:36:4f:6f:e4:82:c1:fd:c7:0d:a4:
29:08:7e:1b:00:a2:d4:06:c2:ea:b5:de:f9:5c:59:38:c7:f4:
6f:5c:9b:44:96:56:e6:80:35:75:65:85:79:7f:66:dc:6b:5c:
01:83:a3:2e:7b:eb:2b:14:36:dc:cc:58:ba:9a:87:7b:1d:9b:
d4:4e:16:f3:29:82:56:ed:2c:f1:8c:cc:35:0d:b2:e6:90:93:
64:41:e1:da:62:f9:e9:95:10:78:da:2e:f3:c8:72:7c:33:41:
2a:52:77:1f:82:14:ec:be:43:3c:2a:e3:84:89:f1:ac:86:b8:
73:68:1c:f8:ae:02:27:1e:0d:5a:b1:97:fa:db:e5:96:d0:b4:
a4:0f:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:16 2024 by rpki-client on console-fra.rpki-client.org