Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.cer (raw, json)
Hash identifier: 9afm0keAyk9UGx4TnuZMJUXUN7VLiCbhqkriI0Acl5Q=
Subject key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4D63
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Sep 2023 21:20:44 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19811 (0x4d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 11 21:20:44 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:ba:84:c4:6b:3e:55:99:e3:10:6d:b7:83:
9e:a7:c0:c2:85:48:b5:56:f6:7b:30:e1:a4:3d:fc:
d0:61:8f:69:50:7b:9c:37:69:84:78:72:a9:58:c7:
f6:a0:ae:df:c2:4d:c1:28:51:15:47:70:87:2b:4e:
21:19:32:75:c0:da:6a:02:5e:a2:b0:86:ab:48:76:
68:a0:2e:5d:0c:94:87:eb:ae:36:79:35:37:0d:47:
bf:b7:20:44:c0:e6:d2:9a:de:83:2b:8c:95:3b:dc:
ee:a3:e5:b8:79:a9:48:b8:34:e7:f4:1d:2a:ec:52:
60:83:6a:db:11:ed:7a:b5:b2:a8:61:05:52:eb:5e:
7d:bf:4f:13:b6:9b:8b:4c:96:39:8f:ad:59:97:64:
23:ae:c1:8f:60:85:22:0e:8a:1a:50:f9:df:f4:ad:
0c:5b:70:53:b0:60:1b:65:a2:fe:95:8b:6c:c7:a5:
4e:e1:31:7b:10:b3:02:36:ab:05:28:1b:d2:5e:8b:
a0:dd:2b:14:63:b1:0c:db:f7:75:52:a3:ef:f5:5a:
27:86:2d:00:42:63:f1:cd:c1:22:79:f5:91:9d:a5:
9b:de:bd:fc:19:72:d2:ad:af:09:76:97:b1:de:8f:
eb:99:ee:a5:16:43:3e:5d:dd:09:d0:97:46:0f:85:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8f:16:4e:89:df:c7:ae:f9:c9:24:86:59:b5:95:b2:a3:92:
db:df:f3:f4:06:67:90:b5:7a:2a:7c:03:09:ec:e5:21:30:1d:
f9:a4:f6:fb:dd:fc:bc:52:43:6c:88:be:86:f8:9a:97:f2:fd:
a2:d3:d9:1a:56:cd:02:dd:5d:f3:bc:56:15:ce:49:65:0c:3b:
61:8d:32:c1:22:f7:83:d5:74:75:31:6e:34:28:64:b8:9f:f7:
cc:da:bb:6d:43:41:90:16:f2:58:2b:ce:49:d1:75:80:16:31:
a7:da:0e:78:48:49:ce:bf:38:7c:c5:da:6a:fa:cc:95:26:2a:
09:ec:ab:88:bc:29:65:0c:de:55:01:5d:b2:c5:a1:3f:47:f6:
1c:4b:80:71:a7:0d:a0:6e:68:f9:16:8d:d3:04:e9:71:66:2d:
98:a7:cd:fb:26:33:fd:4f:88:1e:94:5c:2b:ef:3b:8e:0b:b6:
6a:02:64:45:85:cc:ad:9b:ec:5f:d8:5b:80:28:ff:26:58:db:
7f:e7:de:e2:ed:a1:1c:68:d5:67:a4:46:24:ac:55:b0:ee:e9:
fa:af:b5:08:3e:9a:0a:b9:e0:c3:57:9a:9d:3f:70:ba:44:9c:
1f:2b:82:25:97:61:00:1d:94:36:f7:0b:71:4a:48:f0:88:67:
fa:3c:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:28:09 2024 by rpki-client on console-ams.rpki-client.org