Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.cer (raw, json)
Hash identifier: 1pmon/QagHLPGZua2610+klhB5Xx0guKpKwJ3/RouaE=
Subject key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 558A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 May 2024 07:22:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 129.127.0.0/16
IP: 192.43.226.0 -- 192.43.229.255
IP: 192.160.71.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21898 (0x558a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 13 07:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:70:68:e3:1e:96:74:b1:95:e5:34:d6:cb:
2d:9b:3e:de:86:8c:41:5a:42:b7:83:98:d4:8b:73:
32:23:6b:ae:eb:cc:46:9b:e0:f7:fe:e8:c3:e1:d1:
58:83:02:e8:f1:65:88:ad:76:55:29:5b:2a:dc:4c:
01:49:94:cf:bd:7e:e5:a6:5c:ba:1d:a7:d0:2b:47:
9d:9c:d1:29:06:7c:70:c8:10:9b:89:4f:a1:30:09:
98:c0:bb:34:e0:bb:67:fb:cc:7e:9e:95:8a:7c:23:
58:3d:ce:27:74:47:60:16:7c:97:af:b8:db:ce:16:
76:69:71:cc:19:5a:58:e3:19:7d:a7:ea:1c:0d:ae:
a1:06:a9:97:9f:07:ae:3e:90:9d:81:d7:f4:eb:b2:
04:e2:09:e9:c9:09:24:c6:b7:67:89:cd:b3:b7:b3:
a2:92:1c:5f:11:60:a8:c3:de:b4:22:70:be:ae:a9:
22:38:b5:ca:80:26:ff:26:99:78:0a:77:92:6c:84:
77:b8:a3:18:9d:75:ea:99:9b:2f:13:f6:da:0d:74:
06:84:77:16:45:f4:94:89:38:dd:5e:82:27:b9:0d:
3a:eb:29:68:bd:26:1a:34:fa:69:3f:a5:76:69:85:
c7:68:30:ff:9d:1e:d1:cc:5c:2c:4a:41:25:94:b9:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.127.0.0/16
192.43.226.0-192.43.229.255
192.160.71.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9e:54:10:a4:de:41:ec:be:26:44:f0:22:9b:8f:c0:cc:e7:
2b:98:6c:d6:08:12:b8:95:8e:94:9e:5c:c8:ed:15:ba:71:e2:
a5:b2:4e:08:f7:30:d8:b6:9b:68:14:93:aa:65:bd:4d:c9:ed:
b5:28:5a:91:2f:5e:06:b7:bc:e9:57:7a:6a:7c:2d:ce:d4:94:
cf:a7:c5:b5:11:b3:07:a8:d0:8d:b6:21:f4:90:7a:ce:f2:e5:
05:c5:49:56:37:28:34:65:38:58:89:b2:70:40:c6:2c:a7:60:
8d:fe:eb:a0:ab:e8:f9:8f:56:24:4e:7c:3f:52:72:ea:23:55:
03:2f:c4:6c:b7:6a:b0:55:e0:8d:91:cc:78:e0:ed:79:71:87:
be:af:df:67:84:21:09:3f:6b:03:48:d5:50:65:c9:10:ae:85:
3d:d7:72:a0:2a:6b:5d:94:3b:18:5e:4a:40:55:77:89:fd:5d:
7f:e8:29:88:1c:29:d9:26:98:f0:91:cd:8b:8b:71:c9:86:af:
97:80:fc:f5:44:c7:8a:db:95:f2:76:96:42:0f:92:07:b3:c3:
25:f9:3e:19:53:84:dd:6e:69:77:db:90:29:6e:00:70:41:fa:
17:d1:45:b7:ef:dd:a8:18:b0:d4:6e:73:08:3f:e6:16:e1:1e:
6c:46:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org