Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
File: gm447HHypIW0sk7-zoRjJQqEoLw.cer (raw, json)
Hash identifier: gwzZkopPxD/zgbXxY0XfTlurUK209GUEAU+e1FQg/Uw=
Subject key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4CC8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Aug 2023 16:00:01 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 139.101.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19656 (0x4cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 15 16:00:01 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:90:62:d9:77:3d:4e:22:f5:fc:0c:2a:c1:
2c:3d:26:81:be:bf:8a:90:2d:53:d7:f3:cf:2d:6a:
0d:65:9e:08:e9:03:08:a1:e6:66:f2:77:3b:16:d2:
cb:aa:7b:84:cb:e6:03:95:ad:a9:ad:de:dc:32:4e:
19:8b:05:5d:0b:76:78:bc:ed:f5:cb:ea:c0:11:b2:
0d:36:14:69:69:4b:14:9a:32:38:a8:94:3c:97:a9:
59:18:91:39:26:43:58:4d:a8:10:65:80:e5:81:49:
dd:34:2c:ab:e7:31:0c:b1:8f:a7:67:75:66:8f:f5:
03:68:a3:a2:46:e1:a3:21:ee:5f:8a:83:4d:d0:a3:
92:4b:1b:ea:23:cf:08:b9:e9:4c:d6:65:28:f9:2d:
d7:a1:0f:34:5f:cc:52:bb:a6:25:b9:2a:36:8d:c2:
92:f8:cc:62:86:23:f4:43:3b:cd:b8:bb:c6:01:21:
4d:70:c3:08:7f:21:2d:e3:82:3c:41:c6:f9:5c:3b:
a6:a6:8d:cd:46:d2:fe:72:1c:11:ae:40:de:80:88:
c0:c2:61:54:a7:f3:c0:56:83:54:e4:8d:84:a6:2f:
1f:b9:e3:9e:45:42:91:7c:d9:07:41:22:cc:dc:84:
44:23:d4:0b:da:a5:e3:c1:f7:e4:31:d0:a9:9b:62:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:72:e4:4c:cd:29:99:fd:5c:7c:42:3d:12:3f:2e:58:2b:72:
6a:70:78:fa:b9:86:41:41:d9:a4:7c:8e:e7:ae:4d:7a:f6:5e:
f7:a9:65:1b:70:79:c8:75:ee:c9:f2:2b:29:b8:ef:06:f8:2f:
1e:60:94:dc:e4:8f:84:6d:8f:5f:06:dd:8b:b6:2e:32:dd:e8:
31:3d:e4:c6:f0:8b:ea:0b:85:e5:70:f0:4c:58:4d:c5:05:37:
b7:4f:a1:d2:f6:8b:ef:b3:be:66:4d:78:6a:36:81:a6:7f:35:
f5:69:60:e3:ba:81:f4:b5:a9:35:44:76:af:e6:ee:cb:67:1d:
85:a0:5b:49:4f:3a:6f:a3:44:da:e9:a1:f5:9d:fa:6d:0b:b9:
df:34:6b:a0:3d:2a:68:56:56:2c:aa:64:17:12:30:7d:db:4f:
f7:75:b1:3a:56:89:08:b1:39:a3:e9:a5:f4:2b:6f:7f:47:c6:
54:73:3b:10:3c:4c:e4:b1:9e:52:1b:96:c1:22:7c:75:2e:17:
36:67:26:22:23:39:aa:a6:66:54:0b:5e:c2:9d:6b:07:81:eb:
c5:39:5e:68:f9:88:d8:ca:69:12:81:84:e1:46:65:95:3d:97:
79:db:42:d6:1e:8c:30:4c:12:0d:c8:47:6e:dd:5f:33:50:df:
29:96:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:44:28 2024 by rpki-client on console-fra.rpki-client.org