Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer
File: iSLa1s2vuw1ZctFjcXErJPkxe-U.cer (raw, json)
Hash identifier: 7Krz7JfkF/I/QhN2jgITnTmT+QAykWfXYODUdBwvK4w=
Subject key identifier: 89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5AAF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Sep 2024 21:44:23 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 963
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23215 (0x5aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 6 21:44:23 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91475BA/serialNumber=8922DAD6CDAFBB0D5972D16371712B24F9317BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:15:c4:19:1f:d1:69:2c:ed:d1:10:2a:0e:
c4:27:54:09:32:fa:e9:83:e7:88:82:4a:5e:8a:1f:
0a:8b:76:7d:35:ba:a9:f3:24:30:55:8a:0a:2a:c1:
69:b5:08:21:23:be:59:0c:2b:b1:a0:20:3b:24:7f:
45:42:71:13:55:f5:e9:df:06:1a:05:27:f6:44:86:
fc:16:92:55:a8:60:40:97:de:87:3a:83:67:11:60:
88:83:37:0e:30:98:f3:1f:30:6f:82:cf:87:18:f5:
bb:7b:b1:e3:b4:4e:37:62:ad:d4:c4:fd:2c:ae:da:
63:80:a9:a6:9b:8f:4b:d7:b2:6f:fa:d4:0e:1a:5c:
6b:50:23:60:d8:f8:e1:8a:12:cd:a6:11:32:03:ef:
7f:9b:dc:b9:02:2c:14:ea:1f:02:5d:a5:3a:c4:c3:
00:ae:1e:a8:d4:7b:a7:16:f2:89:3f:a6:32:ca:a2:
b8:0a:1d:a6:41:40:f9:d4:7f:4c:d4:fb:1e:70:85:
5d:5a:94:4f:51:46:b8:95:bf:79:ae:e8:81:04:f5:
57:50:bc:d5:8c:47:84:49:2e:10:db:28:95:2c:c0:
b1:d1:57:30:49:17:5d:eb:ff:e6:8f:b4:95:fc:c1:
90:f2:88:28:4b:7a:81:50:e8:73:38:3a:2f:05:62:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
963
Signature Algorithm: sha256WithRSAEncryption
8a:b7:d2:e7:cc:d2:22:13:53:39:79:e3:fb:17:63:21:a3:a2:
a4:6f:1a:7e:48:72:b8:74:24:23:18:e3:47:44:b0:ef:81:e8:
f9:04:78:47:b2:b8:6b:06:2b:81:09:d3:aa:8a:25:d7:69:04:
86:3a:54:93:55:6c:aa:cd:bd:f6:21:12:33:8d:f5:be:e9:71:
67:52:98:c2:84:30:a0:96:24:ea:7b:b9:1f:b4:1c:69:a2:27:
19:a8:49:c0:68:2d:59:51:ba:d1:9d:7c:d1:c6:27:88:99:b9:
a6:a2:ab:c0:51:b7:d8:ab:cc:15:08:72:1a:16:aa:e3:a4:80:
41:e0:47:1d:d6:87:16:c8:2d:c3:69:fb:aa:59:46:87:7b:99:
75:81:40:ed:b1:6d:c7:66:48:99:87:1f:27:cc:90:0f:d2:2a:
e6:4d:ee:0a:e6:cc:54:da:4b:0a:ce:00:a0:f6:2f:31:86:70:
4c:a4:7a:7b:0f:a9:99:8e:65:8c:28:99:83:65:90:92:10:f6:
82:58:bd:b3:68:28:db:23:f5:e9:ae:09:2a:6a:82:84:e9:a8:
d9:12:d3:45:02:98:0d:80:3d:67:ab:8d:d1:b2:00:dc:89:99:
34:33:b3:07:7f:e9:f4:1b:86:d8:d6:a8:b1:ce:61:9d:7a:8b:
05:4d:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:01 2024 by rpki-client on console-ams.rpki-client.org