Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
File: hpBNLQLbigWb7ZOPL46u88Qgb9A.cer (raw, json)
Hash identifier: Y+chVYeDXDu0ZKCohHn+/VKEzUin2lNcfkQWXBNktQo=
Subject key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5B03
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Sep 2024 03:28:55 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23299 (0x5b03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 18 03:28:55 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:82:e0:dc:8a:57:64:e4:23:03:a8:ad:bb:
82:48:38:7d:8a:7b:89:c2:6c:2a:21:50:ab:a3:02:
09:d6:e8:e5:61:d6:d1:dd:7a:2d:f1:92:b8:26:b5:
52:6b:a3:fc:2c:9b:11:11:d6:b9:0a:e4:23:7f:72:
ca:2e:07:1d:60:75:d1:6c:1d:13:9b:18:48:7b:da:
e4:2e:b1:8d:40:d0:43:65:83:ed:c7:63:23:87:5a:
e3:ae:b5:44:3a:bd:bf:d0:f3:63:8b:3a:53:6d:75:
94:0e:fa:5f:11:31:85:34:8e:51:c2:b3:a8:dd:ed:
79:9d:4e:e1:42:1d:27:3f:67:de:fc:8c:4a:4b:f2:
85:89:cc:9a:9b:4e:07:85:78:c3:1c:28:db:b0:d4:
74:f5:fa:7c:b5:a4:ca:33:e6:79:e1:db:b9:61:50:
ca:05:dd:df:37:a4:f6:24:15:ee:d4:c8:36:e9:fa:
73:7d:76:b2:26:e0:68:4e:bf:a3:70:e2:0d:3d:42:
3f:b7:b3:e2:a0:f7:cd:52:cd:56:d1:fa:4b:7d:dd:
aa:b3:65:3c:6f:4c:16:e4:c7:e0:d0:be:27:91:d0:
76:19:c6:46:ee:bd:d1:8e:cd:dc:09:fb:ee:04:e1:
e0:e1:b2:d7:c7:fa:03:7e:21:d4:41:5b:86:26:d8:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e5:8c:7a:cc:05:9f:a6:03:17:a5:91:cc:ab:7c:d0:d1:c4:
ae:ae:e9:ba:aa:2c:d1:4e:3f:c5:b9:c4:8b:8a:52:e3:67:ff:
00:4f:52:74:40:51:48:b8:88:fe:1b:22:22:e5:0c:4c:e1:f9:
18:65:19:9c:16:af:be:df:32:f4:29:e0:6c:f3:0e:f6:06:08:
17:b5:b8:d7:d2:7b:41:4f:d1:eb:9e:fa:02:af:ec:a3:b2:8d:
3c:49:c9:68:3f:5a:b8:d5:37:65:50:60:8d:cb:ae:b2:00:7e:
61:d1:09:d2:ca:b1:00:98:a1:42:28:b2:1b:6c:27:4e:ed:cb:
48:b1:bc:95:b1:a2:9c:6e:07:3e:c2:ab:b9:77:47:23:7d:33:
81:c7:5b:bb:69:b1:73:9a:6f:c6:df:6a:b8:79:ed:72:e6:b8:
3c:b7:d7:60:ee:24:30:cd:b6:c5:b8:7a:68:ca:e1:c0:a9:6c:
5f:00:ba:3a:c4:c4:1a:7a:a0:9b:85:9c:17:41:2a:be:69:0e:
be:4d:d2:a3:1e:6f:b4:7f:0e:63:48:3a:25:14:f3:ba:fe:47:
71:94:50:f7:9d:b9:1c:0f:20:aa:5f:1c:84:c1:13:68:a2:73:
82:98:ec:4a:61:dc:74:bc:19:e4:97:73:1c:fe:13:ee:3f:bf:
5c:a5:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:16 2024 by rpki-client on console-fra.rpki-client.org