Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer (raw, json)
Hash identifier: cZ0Lqie5vUu5eMZuJDDASmnhWkyOS9nDeZyV8T0VeMU=
Subject key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 579E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 02:25:17 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 192.135.208.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22430 (0x579e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 3 02:25:17 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:89:63:03:c4:19:65:09:19:08:cd:9c:b9:
2f:20:6a:cc:a5:74:56:b0:33:de:6b:45:7f:42:e1:
2b:fb:fe:83:78:ed:1d:00:c9:a6:c5:63:36:d3:4c:
cb:0c:c0:fc:b9:6c:e3:27:97:ef:a8:9f:85:33:4c:
c4:b9:b8:cd:b2:5f:ec:79:1e:65:18:cf:78:e0:9a:
10:90:da:61:4e:e8:10:24:67:f0:76:c9:0d:80:79:
d4:2b:ed:45:38:ef:3f:82:30:f0:31:19:e7:b5:45:
db:90:80:9b:53:8e:9d:99:44:28:5c:a6:95:1c:5c:
aa:36:3f:fe:f9:00:7b:d8:1a:94:15:88:77:6f:f7:
61:12:29:7d:17:95:49:63:aa:c8:4f:2a:cb:c4:a5:
e2:03:3c:93:d7:14:3f:5d:a4:a6:20:26:d8:63:3e:
1e:25:9e:7c:05:2c:eb:ba:ed:93:5b:9b:b2:27:cd:
20:83:64:5d:cc:7c:19:31:84:26:9d:83:d6:69:ec:
6f:cc:ad:29:49:f6:70:e2:07:66:f5:0d:c1:c4:63:
8a:e9:55:cb:a4:c4:40:55:05:cd:9f:7e:c8:7b:3d:
8a:cd:4c:d8:3d:f9:88:d3:90:ff:9a:61:fb:50:d8:
17:19:53:71:2c:84:99:81:08:ae:ac:8b:9f:42:aa:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.135.208.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e0:7f:6f:03:8c:59:a5:e8:cc:de:85:45:e3:ee:7c:59:9e:
44:23:41:29:88:a7:9f:8a:7b:ab:29:35:aa:6a:e6:8e:95:7b:
27:3f:e6:23:62:73:03:9e:70:54:62:16:71:ca:1e:7d:23:b0:
c3:0c:1b:db:56:2d:58:02:da:c1:00:4a:66:79:4a:16:58:f8:
e5:4f:78:d5:ea:4d:98:b7:b6:51:b6:6d:48:11:35:30:40:be:
b4:fa:a6:28:42:55:68:ab:97:c3:2f:1b:e5:07:bc:2d:64:af:
dd:89:93:5a:07:28:1c:69:ee:d3:6f:ae:0b:93:f1:4b:ff:bc:
4c:69:4a:f3:b8:e6:91:80:49:10:41:76:62:9a:23:d2:7a:df:
72:22:da:62:1b:30:d1:c6:5f:06:bc:1a:27:ef:82:30:70:4b:
a9:26:c3:31:a2:9e:22:3c:e9:bb:96:fa:43:09:5e:c4:f8:90:
e0:04:2f:07:2c:f4:a6:4f:16:74:ee:aa:92:2a:36:7d:61:6f:
39:10:2b:e4:b0:65:c6:d1:8b:f2:7b:68:1a:71:db:c5:de:f0:
5f:a0:30:b4:09:13:4e:00:10:c2:61:5b:62:65:ee:a5:4a:52:
45:6e:88:9a:59:91:85:f5:23:22:03:1a:49:8a:96:0d:0f:07:
6c:59:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org