Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
File: gm447HHypIW0sk7-zoRjJQqEoLw.cer (raw, json)
Hash identifier: /n3WbLt3Fql0XdtI4zcHeftv4++Xy+M/JFJw/hJlexM=
Subject key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 59B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 Aug 2024 14:58:36 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 139.101.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22966 (0x59b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 16 14:58:36 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:90:62:d9:77:3d:4e:22:f5:fc:0c:2a:c1:
2c:3d:26:81:be:bf:8a:90:2d:53:d7:f3:cf:2d:6a:
0d:65:9e:08:e9:03:08:a1:e6:66:f2:77:3b:16:d2:
cb:aa:7b:84:cb:e6:03:95:ad:a9:ad:de:dc:32:4e:
19:8b:05:5d:0b:76:78:bc:ed:f5:cb:ea:c0:11:b2:
0d:36:14:69:69:4b:14:9a:32:38:a8:94:3c:97:a9:
59:18:91:39:26:43:58:4d:a8:10:65:80:e5:81:49:
dd:34:2c:ab:e7:31:0c:b1:8f:a7:67:75:66:8f:f5:
03:68:a3:a2:46:e1:a3:21:ee:5f:8a:83:4d:d0:a3:
92:4b:1b:ea:23:cf:08:b9:e9:4c:d6:65:28:f9:2d:
d7:a1:0f:34:5f:cc:52:bb:a6:25:b9:2a:36:8d:c2:
92:f8:cc:62:86:23:f4:43:3b:cd:b8:bb:c6:01:21:
4d:70:c3:08:7f:21:2d:e3:82:3c:41:c6:f9:5c:3b:
a6:a6:8d:cd:46:d2:fe:72:1c:11:ae:40:de:80:88:
c0:c2:61:54:a7:f3:c0:56:83:54:e4:8d:84:a6:2f:
1f:b9:e3:9e:45:42:91:7c:d9:07:41:22:cc:dc:84:
44:23:d4:0b:da:a5:e3:c1:f7:e4:31:d0:a9:9b:62:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:94:cb:33:1e:0d:77:a7:64:65:e7:c4:d3:1d:46:8a:56:cc:
f4:16:df:4e:08:b1:c2:f7:c2:f5:3f:4b:d6:18:fb:42:f9:0f:
f5:43:53:ba:06:28:bf:45:fd:46:1b:22:05:e4:d6:06:a5:14:
b4:d1:a0:03:6a:06:7d:46:b4:9a:0c:c5:26:83:8d:c1:44:3c:
c3:be:0b:8c:5e:e2:48:39:0c:99:25:af:06:e7:b9:bb:47:ca:
45:ce:f4:13:ff:46:90:d9:41:35:05:93:55:e2:2f:6f:70:d7:
2a:b9:a4:bf:e9:be:8f:6e:70:d1:1c:b0:c3:ba:91:01:ec:72:
d7:92:08:9e:ad:aa:4d:30:d4:a3:22:17:09:e5:7a:ee:d4:d2:
17:d9:a9:5b:d3:63:87:62:ef:6b:64:be:40:6e:a5:15:af:ec:
cf:4f:e8:05:3e:fb:9d:8b:71:d1:81:0e:42:01:58:e6:13:fb:
63:4e:4c:3e:2b:03:14:9a:36:07:58:e9:e3:9a:59:86:96:e3:
42:30:ad:f8:87:23:49:ed:44:6c:ef:58:09:a5:3b:b9:6d:7e:
1b:5e:32:9b:ea:97:ec:f0:ef:e7:cb:51:5f:ae:70:1f:99:79:
a0:cb:fe:be:39:fe:ee:8c:3e:f8:72:f5:4a:89:58:03:7c:70:
94:98:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org