Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
File: X60bOb5FVSYiBtGfWmabx7afcsg.cer (raw, json)
Hash identifier: 0ObHkgWA+AZ7v2wmC3/5/wTJLbRmMYEGKEn8bmy4nTM=
Subject key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 57CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jul 2024 16:18:42 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 192.150.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22474 (0x57ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 4 16:18:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:59:7f:fd:0a:a1:41:b5:be:76:33:9b:f3:
35:32:3b:4a:df:12:92:75:6d:44:36:05:b7:21:51:
fd:a6:da:bf:13:5c:ae:6c:35:5a:a5:54:e3:dc:83:
53:35:df:19:78:dd:c7:d8:fd:b0:9e:87:9c:7f:ea:
7c:b3:90:e9:25:77:94:07:23:99:07:b6:97:31:11:
43:4c:fa:f0:69:8e:e7:a5:a8:69:ad:2c:1b:ea:9f:
f1:63:37:0b:b7:ee:0c:a0:72:c2:be:49:be:f0:8d:
44:da:b3:a7:1f:a6:06:27:92:4d:1b:aa:bf:9a:39:
f8:83:6b:56:1b:34:98:fa:e9:01:a1:db:c8:88:f1:
f0:70:ff:6e:89:24:6a:e1:fa:68:da:4b:1d:ea:00:
5d:54:da:36:b0:b3:8f:46:69:ef:0b:40:7a:46:b9:
ea:fb:d4:fd:2d:37:51:99:d2:60:d3:4d:73:f9:99:
a3:9a:54:0a:59:0c:7d:d3:89:21:7f:91:69:73:79:
76:4b:2e:de:92:d2:42:d7:07:8e:89:49:fc:8a:16:
d0:8e:85:2b:2e:fa:2e:56:fb:ea:25:bf:6e:5c:ca:
f3:71:70:80:02:a8:bb:0b:d5:f2:b8:e8:3e:15:c3:
4b:48:ff:22:cc:ce:0e:b9:62:02:1a:49:9d:06:bf:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.150.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a6:6f:9e:7f:40:31:a0:a7:e8:da:70:73:76:f7:67:66:e4:
09:1c:d2:50:7e:d8:aa:d2:f6:c2:9b:c4:ed:dd:99:ed:07:2a:
09:7e:0a:4d:08:77:7d:75:1a:1e:f2:f3:bd:7f:7c:7b:20:27:
10:0c:36:e9:31:da:05:c7:32:de:e4:9b:a3:9f:19:36:ed:ce:
bf:6b:bb:aa:b6:41:8a:4e:87:ef:ec:c5:b3:25:e5:a0:d9:db:
fd:7e:a8:ef:26:73:a2:d0:fa:59:04:a3:30:ae:60:e4:fd:fd:
26:fb:f1:14:ed:3a:37:71:7a:a7:65:3d:3c:6d:23:79:ba:96:
67:16:d3:20:9e:d3:7a:8a:7e:3f:82:80:32:1b:95:6d:33:d3:
da:4c:13:a2:73:cc:86:e6:74:7e:c5:d1:b8:c4:a2:b4:4f:4b:
e8:b3:10:34:bf:c8:b9:d0:61:1c:04:37:36:a1:6a:44:9e:c8:
6f:06:2c:af:2a:93:5c:81:62:aa:3b:6d:f0:b2:c0:e6:0c:1f:
e6:77:74:96:2b:fe:c4:20:88:a6:35:07:d6:8c:b9:be:cc:1a:
b1:9e:8d:3c:8f:8f:a5:07:45:ea:62:c0:75:c6:6a:33:39:ff:
f1:9b:a3:b0:60:90:68:6f:d7:b1:07:78:27:a2:7f:9b:22:1e:
4b:73:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org