Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
File: cPEzmWaoGrwgfjvuM3CR2fLzydc.cer (raw, json)
Hash identifier: OT5phMSS323AghRzJZKkz1g6UbN3kHNY4804Rr+ekoM=
Subject key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F34
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Dec 2023 19:46:35 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 3119
AS: 40747
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20276 (0x4f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 4 19:46:35 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:33:24:b9:77:43:52:4d:f8:69:e6:50:69:
ae:83:ee:85:7d:73:0c:d7:0b:ee:71:f7:32:03:6c:
00:37:52:f7:cc:82:cb:22:01:9d:3c:7a:0e:57:55:
39:31:af:1e:ff:0f:8d:2b:b5:79:b0:b0:88:3d:b4:
08:07:14:b5:3e:7f:e4:54:b4:a0:10:5d:38:f5:ab:
cd:df:3f:65:e6:8b:25:ea:fd:27:14:a6:b2:29:0c:
23:1a:65:73:94:2e:ea:b8:e0:00:1c:d1:20:fb:d5:
46:b7:dd:bc:e1:43:b4:af:62:d6:0a:e2:bd:0d:d7:
14:f8:91:71:81:66:5d:b9:39:6f:62:6b:90:73:09:
d8:e0:34:2e:6d:7a:ed:dd:87:a8:42:32:7b:e4:a1:
46:15:13:92:30:5b:50:41:c5:53:4c:63:6e:ef:41:
68:de:b6:0a:c9:0f:7d:84:0d:3c:24:ff:4d:03:fa:
87:9e:9f:8f:d8:15:e0:f5:e1:6b:d5:91:8a:a5:76:
fe:91:ae:ec:16:6e:89:59:f7:7b:77:52:3b:8d:cb:
ca:89:66:23:e0:e9:eb:26:51:2c:e2:ea:69:c4:7b:
82:77:bd:7a:a6:34:ad:77:35:63:29:b1:53:81:07:
7b:e0:92:40:a0:86:73:45:aa:50:11:c3:a9:c6:24:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3119
40747
Signature Algorithm: sha256WithRSAEncryption
ae:12:25:42:e5:cf:9e:99:08:7b:52:1d:e0:fd:bf:91:30:36:
8a:8e:09:33:40:15:52:e5:8b:56:03:16:f2:4f:0e:98:9b:60:
de:eb:02:80:19:c3:24:c4:4d:32:4d:e9:0d:4c:1c:e4:b8:90:
40:85:cb:ad:33:57:8b:2c:6b:d8:58:0c:ff:32:e3:74:b6:dd:
39:67:70:16:fa:b1:65:4e:e5:68:5d:0f:ac:31:5e:d4:aa:16:
6d:ed:74:41:1e:0f:99:fa:bb:cb:56:03:69:26:b9:dc:42:29:
fb:b9:db:ae:9c:b7:ad:f4:6c:3b:5b:77:74:f9:5b:84:8b:01:
a5:12:f0:9b:8f:a3:c8:fe:e9:50:ea:c5:f5:a6:d2:ec:75:d3:
fa:e3:77:69:f7:fd:f8:87:e6:54:18:84:dd:7c:e4:51:c6:8a:
3e:5d:ba:4e:97:96:d0:da:12:43:7a:a0:39:33:26:d6:e6:7e:
70:98:3d:4a:a2:4f:68:6d:43:eb:55:c4:e5:36:85:18:83:43:
59:08:28:60:ef:7f:5d:35:0b:77:23:b8:2c:b7:cc:ce:47:8f:
10:64:7e:f3:b5:ba:26:d6:ff:4e:30:1f:0a:41:0c:72:7d:b9:
91:ff:82:90:25:7c:4c:30:cc:65:a6:66:e6:2d:89:cb:94:65:
a0:61:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org