Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
File: _rhjYz3rcT99klaMcXmFhLC61mY.cer (raw, json)
Hash identifier: RH6JfHtM4eTwB5p7s7l6O19qi7XE2o5omPJRDyMkgIU=
Subject key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 551A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 02:43:52 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 198.217.248.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21786 (0x551a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 2 02:43:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:f2:6e:91:87:b7:b1:3e:e6:02:1a:11:4f:
7a:b0:e1:25:87:94:46:3e:82:21:1c:ac:2c:63:96:
70:53:2d:b1:b3:d5:08:0c:65:f5:b7:64:cd:bc:ed:
89:78:81:21:11:db:60:1b:1d:e5:38:d4:e8:43:aa:
59:3d:ca:3f:3c:f2:58:19:4f:06:3f:44:0e:02:bd:
8c:59:9c:c8:d1:85:31:6b:9b:0c:9c:17:52:0f:bf:
93:05:ae:43:0b:eb:cb:06:1d:59:2a:6a:9d:e7:c6:
ed:06:57:0c:7b:95:3c:55:cc:cc:28:20:1a:35:53:
12:5e:33:63:50:09:53:86:2f:fa:11:1b:89:13:24:
b2:a2:36:a4:c1:93:04:2f:7f:69:a8:19:f7:ad:3f:
11:88:3f:24:c1:bd:04:65:f4:c4:1b:b0:80:a9:f4:
f1:21:55:47:95:10:23:99:bf:52:13:6a:7a:d1:32:
c4:f9:5e:f3:b4:03:cd:f9:d9:39:73:41:bb:8b:16:
ec:40:ce:ba:4a:d9:47:2b:30:32:51:43:60:f0:0d:
85:da:89:12:04:a9:23:d1:ef:5d:8a:d5:a5:47:10:
2a:c7:67:58:52:fa:8c:13:a0:fb:1d:6e:e5:9f:22:
95:d0:7b:ae:ab:49:0e:a5:66:99:63:77:06:ed:79:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
198.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7c:04:58:d6:3e:42:cf:e8:a8:fa:ff:b5:47:00:d2:7a:ab:
ff:26:c9:f8:b5:50:2b:e3:ef:ca:c7:6f:ad:22:4a:a5:98:99:
2a:0b:40:06:74:f3:6b:89:e7:c2:de:97:e3:41:71:fb:58:a1:
5d:e7:2b:93:ff:c4:3d:84:49:d4:19:de:09:b5:d0:61:6b:2c:
9b:27:44:90:80:8e:e8:b2:1a:0a:d5:0f:ea:73:a2:09:cd:11:
eb:00:6e:4b:6b:0a:a4:af:23:d2:6d:bd:23:db:7a:12:d8:24:
2e:d9:02:6d:97:af:c9:26:c9:77:a7:01:34:db:34:17:f9:51:
f9:b7:47:d5:c4:8f:21:d1:9c:a1:18:ce:de:0f:64:ba:c2:ab:
12:40:2a:2a:61:e4:ee:11:5e:55:af:cb:a3:77:0f:3d:f4:ed:
fb:7e:f6:3d:60:07:ef:c7:56:62:34:07:d2:9d:fe:f2:42:35:
9e:5b:81:05:65:f2:aa:32:97:72:9b:47:1d:79:e5:5c:1a:94:
c0:5d:99:8e:34:5a:29:c2:85:fd:1f:f8:bb:71:e7:91:78:fe:
4e:97:36:43:55:06:0d:62:d7:3d:af:49:52:a4:81:0c:f4:5c:
a3:e2:83:48:e7:11:1f:6a:e0:56:f7:38:64:e6:50:8b:8c:7f:
fd:14:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:40 2024 by rpki-client on console-ams.rpki-client.org