Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
File: g4-9CzleqQcGxsKJrCaw1zigQkE.cer (raw, json)
Hash identifier: 0acvzhA1E/ABbvK+jWFRJWSTO1f4e9Xn9bZVlLy7dqo=
Subject key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 60B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 11 Jan 2025 08:08:39 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.46.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24760 (0x60b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 11 08:08:39 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A917BB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:fd:a9:62:19:d7:4f:9d:3a:77:a1:7b:73:
e6:93:5c:e5:36:38:89:7f:c6:37:0c:33:d7:41:85:
83:0d:1d:14:46:74:fc:e3:5a:41:d1:6a:37:c5:0f:
47:3b:49:f0:c2:ce:d5:b8:41:2e:a3:0a:0b:03:6e:
fe:5a:1c:7d:62:b9:3a:63:c1:16:24:c1:f8:c8:9f:
39:2d:51:7d:6c:d7:2f:26:de:ce:a1:f5:3e:af:c4:
c6:60:03:ca:e7:40:42:a2:ba:d4:8c:4e:de:9f:9b:
37:a9:db:ae:24:01:68:cb:f4:5b:65:2e:a1:0e:79:
f3:5e:cf:b2:29:89:13:5c:3a:0c:58:ae:45:a6:d8:
29:c5:f7:32:96:c2:a6:7d:23:8f:41:5f:11:26:34:
f8:10:f3:8a:19:05:be:12:8f:00:5a:71:53:6d:e1:
22:6b:bc:24:04:b5:5a:aa:c4:9d:7f:c4:e3:ee:0f:
98:f9:ff:33:26:b2:67:ea:69:fa:47:25:4b:db:da:
50:05:e7:f1:08:b6:5e:69:40:eb:98:6c:78:9d:ce:
e6:56:98:7a:09:71:03:24:f1:78:36:47:f8:b3:c8:
e2:92:64:53:6c:cf:23:39:50:55:3e:d4:af:35:7a:
35:e8:7c:14:93:74:11:35:0f:3b:d1:df:d2:b7:fc:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.46.0/23
Signature Algorithm: sha256WithRSAEncryption
09:78:ff:95:51:0f:de:6f:34:d5:09:c4:1b:26:17:21:78:d5:
42:e9:4a:d8:72:7a:dc:a8:eb:b7:ad:2d:15:98:7e:f6:91:6f:
e8:a1:13:f8:18:71:5b:8a:4d:e3:be:c8:ee:3d:99:30:a6:07:
ae:19:b7:59:d1:5e:2b:14:5a:6c:94:cf:e3:71:ac:0a:51:de:
95:f1:5f:74:04:75:f8:28:fb:92:b7:92:40:ac:3c:0f:fd:8a:
06:04:89:5f:a0:35:d8:21:ff:5f:64:0e:ec:60:60:4f:b3:c8:
5a:30:a3:d6:fd:08:d4:03:87:a0:86:6c:37:6e:a3:c0:ea:2e:
16:45:7b:54:8a:05:88:a4:00:53:aa:56:89:00:f4:56:3a:58:
45:4e:bf:24:3f:44:b1:74:3b:9e:dd:68:a2:7d:d8:27:5a:ed:
20:1e:76:23:1c:58:b3:0c:8e:54:64:d7:f9:d8:0d:53:d5:e2:
23:ed:45:52:2d:af:3a:cf:80:41:ee:c4:a9:31:51:ce:7a:8b:
8b:7d:5a:0c:c1:37:7a:a1:01:bc:1e:4e:2b:24:66:01:50:59:
c6:22:fb:79:95:e1:99:12:0e:af:30:3a:26:a7:8c:2d:0f:17:
58:4f:e3:9a:d1:6d:cd:45:b4:cf:25:7d:28:ca:89:ec:a1:62:
b2:c1:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:46:18 2025 by rpki-client