Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.cer (raw, json)
Hash identifier: 6ookbehGsyHUzX2sMkIlTi10oHPr0ncmcNFGRwOJk2w=
Subject key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Oct 2024 20:53:43 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 146.88.24.0/22
IP: 164.52.192.0/19
IP: 205.147.96.0/21
IP: 205.147.108.0/22
IP: 216.48.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23542 (0x5bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 8 20:53:43 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:ee:18:05:09:02:51:be:f7:6a:c3:7c:d7:
2f:c9:36:a6:30:03:a8:34:7d:2f:a6:d6:db:13:43:
e0:c6:53:0a:7a:26:4a:f0:b0:28:74:71:67:3f:5f:
6b:a0:19:1b:0e:ba:97:09:35:d8:fb:18:70:fd:f6:
72:9c:99:19:2a:fc:8e:f5:b9:2a:d3:db:26:26:b9:
89:48:e7:5c:dd:6c:76:07:ea:70:09:72:5e:5f:15:
fc:d8:b9:81:e0:c2:2e:04:f2:20:09:21:d9:d2:82:
98:7e:ec:96:69:df:71:fb:66:8e:63:a0:2a:38:e2:
76:9a:7b:8e:81:65:67:d2:e0:a5:5b:cf:30:69:82:
89:85:c0:9e:e8:d9:85:55:7a:08:41:ff:e2:fe:86:
5b:36:a5:3e:41:75:3c:d9:47:4e:ad:b7:b3:f5:26:
4a:f8:27:f6:13:e6:71:46:9c:02:f3:90:26:ba:40:
c3:97:90:4f:28:2e:f1:fc:65:95:ef:2c:79:c6:2e:
93:aa:c6:d1:e5:01:41:9e:92:cc:41:c7:97:74:aa:
b6:b9:a7:7c:f4:f8:d2:bf:7f:b7:4a:2f:d5:f0:db:
9a:6b:f6:0a:e4:a4:e9:63:7a:0e:b5:9a:24:60:7b:
07:ec:b6:61:c3:86:3c:ae:85:11:16:27:f6:ec:df:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.24.0/22
164.52.192.0/19
205.147.96.0/21
205.147.108.0/22
216.48.176.0/20
Signature Algorithm: sha256WithRSAEncryption
07:41:ef:d5:b7:f5:3b:a7:5e:cf:0e:9a:44:f4:89:9b:c8:f1:
7f:f2:a2:19:e0:a8:a2:06:7e:ee:1c:f0:39:e1:aa:85:c9:cd:
4d:a0:4a:4e:92:4d:d1:ab:a1:83:7c:49:77:d3:dd:2c:9e:0b:
66:42:1f:31:ed:52:4d:c2:a6:1d:27:46:27:ca:57:2b:5e:01:
28:9d:22:37:0e:76:dd:b2:92:79:01:44:c4:18:06:f0:5d:89:
cb:77:ee:b8:fd:d5:f0:92:26:75:e2:c2:c1:26:03:20:53:68:
ea:28:b8:a0:17:7d:83:b9:db:bc:17:52:21:db:ed:60:89:e7:
8f:ef:5b:f4:9f:75:f6:85:57:58:7f:de:df:0b:a8:1a:55:c8:
5b:f4:f8:aa:a5:2e:41:fc:ec:d9:9b:eb:bc:45:ec:cb:39:1b:
1f:4c:5b:ab:e5:eb:6f:45:2d:f3:e8:7e:a3:41:80:29:10:47:
59:82:5f:3e:42:ee:53:3b:69:60:55:f8:92:54:be:13:5d:f3:
36:c7:ce:7a:ac:ee:e9:50:01:a3:5d:dd:b9:0d:20:8c:da:dc:
f2:7c:55:d9:41:07:6b:b7:c2:f1:85:2c:51:94:95:b8:3c:53:
95:02:c6:c5:5f:76:eb:47:95:0e:49:1c:0f:28:97:64:fa:b2:
19:6e:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org