Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
File: X60bOb5FVSYiBtGfWmabx7afcsg.cer (raw, json)
Hash identifier: oy6HtVaaTJPHMGk1CVSMAoYUj8v/kYVBP1y0dBa11ZM=
Subject key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4BD6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Jul 2023 17:45:07 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 192.150.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 04:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19414 (0x4bd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 17:45:07 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:59:7f:fd:0a:a1:41:b5:be:76:33:9b:f3:
35:32:3b:4a:df:12:92:75:6d:44:36:05:b7:21:51:
fd:a6:da:bf:13:5c:ae:6c:35:5a:a5:54:e3:dc:83:
53:35:df:19:78:dd:c7:d8:fd:b0:9e:87:9c:7f:ea:
7c:b3:90:e9:25:77:94:07:23:99:07:b6:97:31:11:
43:4c:fa:f0:69:8e:e7:a5:a8:69:ad:2c:1b:ea:9f:
f1:63:37:0b:b7:ee:0c:a0:72:c2:be:49:be:f0:8d:
44:da:b3:a7:1f:a6:06:27:92:4d:1b:aa:bf:9a:39:
f8:83:6b:56:1b:34:98:fa:e9:01:a1:db:c8:88:f1:
f0:70:ff:6e:89:24:6a:e1:fa:68:da:4b:1d:ea:00:
5d:54:da:36:b0:b3:8f:46:69:ef:0b:40:7a:46:b9:
ea:fb:d4:fd:2d:37:51:99:d2:60:d3:4d:73:f9:99:
a3:9a:54:0a:59:0c:7d:d3:89:21:7f:91:69:73:79:
76:4b:2e:de:92:d2:42:d7:07:8e:89:49:fc:8a:16:
d0:8e:85:2b:2e:fa:2e:56:fb:ea:25:bf:6e:5c:ca:
f3:71:70:80:02:a8:bb:0b:d5:f2:b8:e8:3e:15:c3:
4b:48:ff:22:cc:ce:0e:b9:62:02:1a:49:9d:06:bf:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:23:bc:0e:18:e2:2c:15:20:60:16:4b:7f:43:b4:78:74:3c:
69:e2:70:28:ae:00:78:a2:12:cd:a6:5e:8c:13:bb:c9:80:7e:
a4:69:47:01:f1:11:38:5b:05:93:d2:51:5c:02:07:ad:26:34:
7d:69:e6:12:2a:79:5f:f3:5f:f7:69:15:86:e8:7c:20:47:11:
51:ee:29:c1:3e:c9:33:7f:ee:6f:50:e9:e5:ba:dc:fc:a0:3f:
d8:25:8d:e4:ad:0f:65:ab:be:e9:09:5f:3d:0b:99:45:c1:8a:
f2:ae:8d:69:2b:6b:a8:34:0c:3a:24:f2:77:00:80:de:28:e2:
24:0f:8a:96:8d:69:65:78:fe:8d:02:53:02:c0:b5:ca:e2:ca:
68:4b:ad:b0:80:a6:37:5b:f2:12:6f:78:3f:a8:2e:b9:35:5b:
2b:ab:e0:2f:c0:8c:1a:1e:03:6e:cf:9a:3a:3a:fd:a4:a3:50:
be:1c:ff:ef:c7:88:d0:01:40:43:6e:94:2d:da:b4:5a:29:3b:
18:fb:28:c1:7f:b8:e3:20:9f:08:13:55:9c:57:04:c2:d2:67:
4e:bc:c0:0c:33:7c:77:71:5b:d5:da:ce:7c:89:ea:ec:0b:1c:
f5:2e:fd:a2:41:e2:5b:9f:6a:3e:59:0f:3a:e1:0f:36:22:c5:
02:0c:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:37:07 2024 by rpki-client on console-fra.rpki-client.org