Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.cer (raw, json)
Hash identifier: ThFq3V+gu5VFd/iUQgwK/TePzZASb9LT0nE34gCfxfE=
Subject key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4DA4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Sep 2023 01:05:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 129.127.0.0/16
IP: 192.43.226.0 -- 192.43.229.255
IP: 192.160.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19876 (0x4da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 25 01:05:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:70:68:e3:1e:96:74:b1:95:e5:34:d6:cb:
2d:9b:3e:de:86:8c:41:5a:42:b7:83:98:d4:8b:73:
32:23:6b:ae:eb:cc:46:9b:e0:f7:fe:e8:c3:e1:d1:
58:83:02:e8:f1:65:88:ad:76:55:29:5b:2a:dc:4c:
01:49:94:cf:bd:7e:e5:a6:5c:ba:1d:a7:d0:2b:47:
9d:9c:d1:29:06:7c:70:c8:10:9b:89:4f:a1:30:09:
98:c0:bb:34:e0:bb:67:fb:cc:7e:9e:95:8a:7c:23:
58:3d:ce:27:74:47:60:16:7c:97:af:b8:db:ce:16:
76:69:71:cc:19:5a:58:e3:19:7d:a7:ea:1c:0d:ae:
a1:06:a9:97:9f:07:ae:3e:90:9d:81:d7:f4:eb:b2:
04:e2:09:e9:c9:09:24:c6:b7:67:89:cd:b3:b7:b3:
a2:92:1c:5f:11:60:a8:c3:de:b4:22:70:be:ae:a9:
22:38:b5:ca:80:26:ff:26:99:78:0a:77:92:6c:84:
77:b8:a3:18:9d:75:ea:99:9b:2f:13:f6:da:0d:74:
06:84:77:16:45:f4:94:89:38:dd:5e:82:27:b9:0d:
3a:eb:29:68:bd:26:1a:34:fa:69:3f:a5:76:69:85:
c7:68:30:ff:9d:1e:d1:cc:5c:2c:4a:41:25:94:b9:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.127.0.0/16
192.43.226.0-192.43.229.255
192.160.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:69:5b:10:26:34:e0:3f:bc:0f:e1:e1:b9:cb:98:4b:84:a9:
0c:14:83:a3:12:5a:be:42:d3:16:a0:01:69:98:01:d1:e5:96:
a5:2e:38:a2:cc:37:51:81:89:47:80:50:c4:b9:f4:47:4a:a4:
f3:59:95:9f:61:36:a4:cf:3f:f6:9b:67:24:8c:30:4a:b5:b0:
84:62:76:53:e6:7f:ad:70:53:aa:f2:53:de:9b:36:d1:3b:19:
b6:e4:56:12:58:ce:e5:cc:e9:ab:c0:64:81:71:78:76:59:9a:
4f:90:e2:75:c8:2e:2e:9c:81:f0:97:db:9e:a4:ff:5a:53:e2:
ef:b9:24:59:d3:ed:5b:46:63:3f:ad:4a:fc:85:39:d3:01:e8:
69:5f:cc:ee:e7:04:54:ad:7b:cd:b6:d9:a0:79:eb:b6:ef:21:
a0:73:a4:5e:b7:73:08:e4:9a:0c:68:a6:d3:fb:69:b4:f6:02:
1b:9d:71:8e:d3:c1:d8:1c:c5:aa:4b:a2:d1:91:c4:16:23:59:
55:b5:8c:4a:c3:42:a6:34:06:cb:4b:0a:f9:cb:5d:62:7d:ff:
e7:6a:6f:00:d0:62:d0:ad:96:29:69:6e:6a:18:47:ac:ec:79:
1e:9e:03:42:70:18:6e:ff:49:0b:1e:bd:dc:b3:e7:12:fd:f0:
f6:c9:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:13:53 2024 by rpki-client on console-ams.rpki-client.org