Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
File: ftF6_XNwpqkI2CYrhtq8fu09YUA.cer (raw, json)
Hash identifier: XYU/HATZU2svNTWbxzZekk6KxFemY29eeC9J4OUb9Ys=
Subject key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 55A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 May 2024 22:44:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 64.207.208.0/21
IP: 74.118.80.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21926 (0x55a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 14 22:44:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:ba:85:b8:29:a8:ca:58:f6:d2:c8:58:a0:
c4:6e:99:9a:6e:f1:3e:9d:9b:17:16:06:9f:62:5e:
29:88:0b:be:c7:80:fc:5b:24:cb:38:c8:ba:46:df:
da:1c:18:86:b0:68:40:75:38:ba:b8:d7:62:f4:61:
a1:5c:65:d2:01:a1:04:38:e4:1d:bf:61:66:8f:51:
f0:5b:cb:14:c4:6e:06:ae:ff:58:94:d0:7b:70:c1:
d9:6a:fc:9b:b9:19:49:cf:c7:08:31:55:4e:27:f2:
0e:eb:ea:74:8e:9a:5e:a1:18:b1:40:e0:00:c5:69:
13:a6:18:20:27:73:68:4f:3d:c9:dd:77:80:2b:34:
17:35:c8:e2:9b:09:f5:0b:57:10:d9:60:cb:80:7e:
1f:e9:07:ee:07:be:39:e9:6d:d6:4a:a8:8b:87:48:
2e:6c:e1:26:86:7c:f3:a9:b9:5e:72:50:08:bd:b5:
e0:d1:ef:4a:48:25:9a:75:14:4c:3c:89:c4:52:f7:
78:9f:a7:80:ea:78:97:ac:4c:d2:16:34:13:e8:cb:
c5:c6:d9:40:08:47:30:4f:72:70:fd:17:bb:e5:44:
67:62:11:34:ad:aa:64:d8:3c:92:60:17:d9:8a:c1:
30:10:16:f6:60:21:c4:51:86:56:55:6f:86:46:b2:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.207.208.0/21
74.118.80.0/22
Signature Algorithm: sha256WithRSAEncryption
72:a9:7e:eb:40:d5:b1:e9:a8:d0:fb:d0:f8:74:a4:ed:06:7c:
98:70:a4:b3:b9:84:05:25:47:a8:bf:5d:29:08:95:e8:1d:3f:
b0:68:ad:14:1a:a5:8e:0e:cd:14:cf:9d:47:5e:d0:95:5d:cb:
25:0c:1b:53:c5:cb:61:94:d8:44:81:3c:a9:36:a4:94:9a:57:
d0:20:e5:f2:18:70:fa:48:f9:57:c2:53:f1:bd:c6:c4:88:43:
30:26:b1:a9:c1:9a:6b:0c:5a:dd:ea:3b:b1:3b:b8:68:3a:4d:
c4:6f:6b:80:69:96:a5:f6:9b:bd:9b:c8:09:b3:26:05:e9:9c:
b3:07:2b:56:b0:35:0a:25:a7:0a:c7:53:db:26:c7:bf:89:4d:
33:04:c4:2a:5e:e7:5c:11:7c:0a:17:5e:b3:d8:00:7e:4a:5c:
b8:6a:ea:c7:9f:62:b6:b9:3f:ac:04:f4:bd:07:a2:fb:a5:75:
69:6e:2a:df:4a:c4:a7:33:a9:43:fd:68:42:4c:6f:38:a4:a0:
04:1f:8e:78:22:e5:98:03:a6:b1:32:17:0c:2f:b2:4c:46:a1:
37:5d:4c:b0:fc:ee:ca:d2:33:b5:f0:f6:67:a9:8c:b3:b3:be:
9d:7c:be:66:4c:9e:a1:a9:8b:18:ac:c2:df:24:0f:76:33:22:
1e:cc:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org