Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
File: fjqkjWfrmWmcArgfcWlt9GWopuU.cer (raw, json)
Hash identifier: H5dcrUuZDRieBsta/GbQwyoQ2Y40nHkUHnPgIxhgC00=
Subject key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E81
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 07:04:00 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.210.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24193 (0x5e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 07:04:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9142420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:d4:fd:7d:32:e0:67:4a:22:24:5f:df:c5:
05:2f:da:44:9b:3d:f0:4b:ae:21:fd:35:a5:e3:32:
61:d0:eb:ff:fc:ed:9f:7c:41:47:de:48:6e:23:d1:
a8:5f:62:38:4a:2d:23:3f:ac:c9:ec:ef:cc:4a:66:
ca:57:5f:02:d8:27:43:d5:f5:14:c6:76:2c:3f:df:
e8:05:f1:0c:d2:41:c8:5e:4e:13:67:df:24:5e:ab:
1b:b0:f5:d7:8b:b3:cd:f8:80:b1:08:d0:b2:0b:c3:
6e:41:5e:fd:bb:35:c8:a3:62:b9:d1:76:c0:c3:27:
7a:59:e7:9f:e7:d3:eb:ff:6f:6a:c9:07:50:de:ae:
11:b1:37:be:ac:a0:ef:85:1c:4a:41:eb:70:73:2d:
95:5e:38:89:80:ad:87:ff:63:c6:46:38:23:4c:27:
53:b4:89:7f:87:ae:03:59:be:89:03:48:0b:b5:3e:
8f:a1:3c:fd:8c:97:d4:fe:0d:90:57:04:47:aa:d8:
c5:a9:4f:ec:2e:85:80:b1:d1:a5:4a:b6:b8:0c:4d:
85:a1:a5:04:f1:00:e7:f4:92:25:97:3d:ba:64:40:
29:a0:09:37:b3:54:03:6c:ee:69:dd:78:fc:e3:36:
71:a7:a5:5d:2f:af:87:89:96:5d:1c:f1:3a:2f:76:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:91:ed:9e:1b:90:20:97:5d:1e:e2:0b:51:6e:c5:3d:54:42:
bc:64:11:9e:9a:e7:81:4b:a3:17:d9:41:a6:f2:91:61:f6:b7:
a4:76:ed:75:74:2b:2d:b4:be:b8:fe:6a:ca:57:74:ba:d3:7f:
de:6a:15:c3:52:7e:ef:fc:9f:fc:90:18:f7:f4:60:cd:1e:af:
49:e6:68:ad:03:a5:6b:b7:80:0b:09:94:cf:79:e4:d3:30:4d:
81:d9:de:19:73:7f:f8:04:60:21:1a:38:6d:91:84:3b:8d:a2:
85:0e:b5:b0:34:cd:b6:a4:a1:ec:bf:f4:83:7f:31:f6:fd:13:
9b:66:40:1e:d6:95:4b:8c:67:75:dd:19:67:2f:07:97:7b:4a:
48:a9:c0:3f:3c:e3:44:47:3b:df:a9:f0:5d:dc:fc:44:77:a2:
08:ad:d8:70:d3:00:98:25:dd:7d:56:0c:0a:56:c2:63:de:90:
8e:02:ce:0e:82:af:c9:ee:01:4a:71:d2:a1:51:3d:cc:79:1d:
e5:e8:3d:ba:8e:81:63:54:db:c2:4f:25:3c:96:87:52:66:78:
ea:6f:ef:5c:9d:4e:51:3d:df:09:8f:d5:6f:e1:4c:c5:4d:ae:
5e:dd:ec:9d:53:db:38:8e:91:92:a7:87:18:96:b9:1e:65:e5:
35:72:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:54:49 2025 by rpki-client