Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (raw, json)
Hash identifier: eNpVmEP9oDoQFgShbbPgFx7hazg+qdMp8YS89/h7I+c=
Subject key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Oct 2024 15:23:45 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 69.94.32.0/20
IP: 69.94.80.0/20
IP: 209.212.192.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23533 (0x5bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 8 15:23:45 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.94.32.0/20
69.94.80.0/20
209.212.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:99:95:da:02:8a:80:5a:ff:8e:b1:1a:e3:a7:21:3a:14:6a:
dd:20:84:10:f4:35:85:85:7d:35:d4:16:6f:49:89:1a:45:a4:
90:59:57:2c:34:0f:80:6a:3d:43:f2:83:b4:d3:48:8c:6f:ef:
9e:7f:a0:ae:f3:f0:94:18:e8:b8:95:3e:e2:11:1d:38:94:29:
a8:14:28:6e:5d:c1:74:20:08:e8:cc:a0:8e:ac:4f:5d:fd:85:
73:0e:1a:57:d2:70:93:76:26:e8:f7:df:82:ff:67:4a:df:ba:
6c:e1:fb:37:29:f7:30:93:f5:df:c4:6c:40:1e:e4:8a:47:8c:
aa:e1:22:25:fe:ab:17:b9:d1:d3:da:6e:4e:8f:77:db:22:1a:
fd:4e:90:a4:b8:f7:f3:2b:c4:14:86:ba:f2:10:96:9b:41:22:
57:4d:e9:ec:06:be:7a:5f:96:41:2c:96:ee:5e:21:d5:d7:c1:
93:2e:16:bb:7a:f8:62:4e:f9:b0:f9:56:c9:f4:e9:4c:1d:04:
c2:b7:65:f5:53:3e:d2:14:84:7d:92:d0:56:15:75:f0:c5:78:
3c:2f:9d:5b:ef:3d:4e:ec:3a:97:13:a7:bc:60:d3:8b:0e:15:
35:d0:09:4d:c0:9e:94:6c:22:65:c5:68:d4:61:78:f9:53:6b:
83:cc:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:39 2024 by rpki-client on console-ams.rpki-client.org