Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer (raw, json)
Hash identifier: wESXkXMavVsH1yiX9qfWjGoGW1iEwAHbKsYqD71ndT4=
Subject key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 52E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 15:04:03 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 167.179.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21220 (0x52e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 1 15:04:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:27:4c:14:51:7c:fb:f9:15:54:59:58:ff:
f6:c3:3e:1c:e1:13:af:01:47:aa:23:fc:14:0b:04:
f3:66:d2:05:a9:b7:af:b0:97:76:d7:e2:bd:63:c6:
cc:fb:5e:9a:f4:61:ae:2a:52:b6:b1:a9:ef:a4:9b:
8c:4c:36:8b:e6:88:0a:32:c6:3d:7f:13:9a:d9:e7:
37:3a:87:e1:36:fa:b9:86:c3:0c:f7:eb:10:97:fa:
34:1e:18:d2:1e:82:5a:91:3d:6a:3b:ac:28:fb:78:
f1:53:ac:3a:ce:f6:17:84:5b:4d:71:11:70:11:64:
9d:e3:1c:da:92:1e:49:14:46:d6:82:aa:6c:6f:24:
aa:21:b0:38:ec:09:83:6e:4a:9c:4f:ed:33:ac:9e:
98:5b:93:72:a0:25:fa:8f:58:5a:a8:cb:67:b8:d8:
8e:22:71:96:9d:05:58:c5:c5:a9:61:b7:33:f9:5f:
4b:b3:e9:d3:7d:06:e1:f4:5d:c6:64:d2:92:07:e1:
40:b6:63:49:0d:fe:d1:e7:e9:bf:cf:48:91:e0:2f:
78:6f:db:bf:aa:9a:97:a6:4a:01:63:16:6c:b5:31:
02:91:71:cc:5c:58:90:86:b4:db:4e:65:b6:7b:2f:
97:aa:8d:b7:18:c5:a9:37:de:ad:37:4c:b5:e5:33:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:80:fd:2c:0b:4b:6a:52:c0:0d:37:cc:94:e4:a9:c6:e7:72:
0d:5c:33:75:0c:cb:97:d0:8b:f2:23:63:29:54:d2:4e:01:ae:
8b:a5:f3:a7:c8:88:3d:4c:a2:7f:a2:4d:ec:ea:c6:3a:f7:67:
37:1a:26:e3:20:e6:2a:cf:74:92:e6:97:cb:43:df:33:d8:0a:
49:91:bf:07:3a:dd:4d:b4:c1:b7:63:4d:89:bf:3c:d9:1f:41:
ce:c1:e2:e1:66:c4:20:aa:c7:45:52:81:27:e2:ec:92:87:c1:
0e:56:32:7d:ea:36:de:2e:ef:b7:b2:45:c3:f7:6f:e0:18:37:
0c:79:28:26:40:3c:4b:08:97:2c:57:32:c7:3a:5f:19:47:71:
cd:e9:d5:af:05:9c:77:cd:bc:22:00:ba:34:dc:fd:36:44:53:
df:11:66:b1:95:76:ae:6a:41:de:9b:d2:4a:34:39:37:b4:d5:
01:d8:a0:74:dd:a1:b5:fe:6e:96:cd:18:b0:41:4a:32:64:28:
ac:d0:ae:fc:f0:66:82:00:5e:34:ce:26:af:24:35:5f:3e:45:
d3:1c:68:d8:b5:d6:1e:81:22:40:5f:1a:51:98:05:f4:cf:4c:
c7:5d:f9:e3:d8:a7:b7:fe:29:2c:15:71:75:83:58:3b:48:e4:
c3:61:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:40 2024 by rpki-client on console-ams.rpki-client.org