Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.cer (raw, json)
Hash identifier: KvacZxzvpozZ/nGlouTtnRK4Gnw5OFUdxoUfXYLchyw=
Subject key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jul 2024 20:21:37 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22710 (0x58b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 19 20:21:37 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:ba:84:c4:6b:3e:55:99:e3:10:6d:b7:83:
9e:a7:c0:c2:85:48:b5:56:f6:7b:30:e1:a4:3d:fc:
d0:61:8f:69:50:7b:9c:37:69:84:78:72:a9:58:c7:
f6:a0:ae:df:c2:4d:c1:28:51:15:47:70:87:2b:4e:
21:19:32:75:c0:da:6a:02:5e:a2:b0:86:ab:48:76:
68:a0:2e:5d:0c:94:87:eb:ae:36:79:35:37:0d:47:
bf:b7:20:44:c0:e6:d2:9a:de:83:2b:8c:95:3b:dc:
ee:a3:e5:b8:79:a9:48:b8:34:e7:f4:1d:2a:ec:52:
60:83:6a:db:11:ed:7a:b5:b2:a8:61:05:52:eb:5e:
7d:bf:4f:13:b6:9b:8b:4c:96:39:8f:ad:59:97:64:
23:ae:c1:8f:60:85:22:0e:8a:1a:50:f9:df:f4:ad:
0c:5b:70:53:b0:60:1b:65:a2:fe:95:8b:6c:c7:a5:
4e:e1:31:7b:10:b3:02:36:ab:05:28:1b:d2:5e:8b:
a0:dd:2b:14:63:b1:0c:db:f7:75:52:a3:ef:f5:5a:
27:86:2d:00:42:63:f1:cd:c1:22:79:f5:91:9d:a5:
9b:de:bd:fc:19:72:d2:ad:af:09:76:97:b1:de:8f:
eb:99:ee:a5:16:43:3e:5d:dd:09:d0:97:46:0f:85:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
47:54:aa:8b:44:77:84:e3:26:b8:2c:c5:16:78:59:5c:08:8a:
c0:53:01:e6:6d:14:53:56:f5:40:6f:7e:4d:48:44:29:0e:a9:
ee:06:65:0a:44:99:94:b3:74:c0:b3:dd:e4:12:26:7d:20:de:
e4:2a:52:ad:e1:36:db:a9:98:49:98:0b:18:df:14:d4:ca:dd:
36:73:4b:fb:4b:70:63:64:a9:3d:02:5b:7d:f8:4e:e1:2a:01:
49:9e:5c:4d:e5:72:64:d1:c6:ed:99:df:65:da:f7:41:ae:2d:
f6:e5:3a:44:53:19:c7:a8:eb:2d:db:c4:18:b6:54:06:07:26:
4a:a0:0e:e6:fa:fa:27:4f:e6:13:b1:5e:50:51:5b:05:81:b5:
3a:4d:f7:36:71:5d:f7:96:87:35:71:8d:10:ac:cd:4e:aa:8e:
15:21:74:75:a8:e6:93:59:3c:35:10:cb:7e:04:90:70:cc:2f:
7c:fa:02:92:a0:99:33:2b:dc:1b:8b:a0:7f:61:66:97:47:d8:
9b:94:29:f3:6d:06:26:11:99:69:24:88:c1:c9:e4:54:93:48:
49:52:88:e1:04:0a:84:99:a5:48:72:b8:3b:6e:ff:ed:72:fe:
17:0f:80:a2:fd:87:a8:d8:a2:8c:5e:30:14:36:95:b0:70:92:
f8:00:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org