Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
File: iTrFeQFBVhhq6vUDS6C0km-S43Q.cer (raw, json)
Hash identifier: 3ufPinbeMLzH3zuBglQYdmUHVQbyQhF4Kkpew0FplX0=
Subject key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5EEA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Dec 2024 17:45:22 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jan 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24298 (0x5eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 4 17:45:22 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:b6:90:dd:ca:9a:1e:94:83:a8:3f:e4:3f:
d4:4f:4f:02:8e:60:b4:2c:e0:6e:02:35:d3:66:39:
52:33:3b:b1:04:6d:c5:0b:3a:2a:3d:fc:46:f7:dd:
1e:cb:a6:f5:fc:a7:e1:01:b2:61:10:c6:58:6e:0d:
37:d7:42:b8:ce:cb:76:69:75:0b:56:00:0c:13:bb:
82:53:85:88:9d:f4:0d:b1:ac:ef:0c:eb:5e:d7:09:
b5:c2:dd:fa:f7:9b:77:4f:b2:c0:71:89:d1:75:f0:
d5:11:3b:6c:11:0b:45:65:01:9a:59:0b:25:c1:98:
2a:c6:1d:bc:00:34:c9:1c:dd:af:f8:93:68:51:8b:
81:29:f9:3a:cb:c0:52:7c:93:31:ce:a7:f4:62:c2:
80:3d:36:c6:b4:7a:ff:bf:a2:a3:3d:b8:55:dc:4b:
79:bf:29:22:3f:b1:4d:9d:29:55:d1:c0:db:6d:3e:
c8:bd:9d:6f:c3:70:8c:8d:f0:bb:d7:72:40:11:cf:
1f:05:cb:82:1a:1e:28:bb:7e:68:9d:9f:bc:56:e9:
22:29:5e:1a:0c:7b:78:ff:f2:ea:f7:49:c7:a6:cd:
0f:68:e5:1d:c4:f3:2f:9e:5b:32:bf:ef:ea:20:ca:
52:8f:62:17:7b:2b:eb:bf:15:a9:b7:f0:c7:3d:18:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.162.0/23
Signature Algorithm: sha256WithRSAEncryption
81:09:98:67:52:c7:8b:c5:41:27:c4:1a:36:ea:ba:46:7a:ea:
91:6c:93:7c:ec:de:8b:34:40:5f:64:35:b6:db:86:de:9f:02:
da:2c:91:7d:cb:4a:3d:df:0d:1f:c4:01:4b:bd:35:a8:8c:da:
40:f4:9c:78:07:a7:94:71:8f:a0:32:e5:22:de:51:9d:f4:a9:
d2:ac:cb:c5:f1:3a:4f:c3:03:25:fa:62:f1:fa:15:cc:64:24:
fa:45:7a:89:24:df:29:8e:d5:6e:fa:94:fd:3d:89:68:40:3b:
b4:91:d7:25:ad:10:8c:87:dc:97:77:26:3f:fe:3c:f9:c5:43:
b4:21:55:23:f3:39:46:73:c0:04:c8:4e:8b:a2:ec:08:7d:bf:
bd:03:1e:a1:68:60:bf:95:f5:5e:e6:32:1a:ec:2a:b5:ad:16:
b3:df:08:40:9a:00:d6:1d:02:cc:33:8f:c1:33:f3:72:49:e4:
cb:65:04:18:f3:da:b0:e8:ae:ce:d5:54:9f:11:b8:3d:49:01:
a1:2f:47:24:a5:d8:c7:9f:fb:73:ac:32:f2:cb:fa:ad:0c:a7:
32:83:ee:04:f5:41:8a:7d:ee:60:5c:4f:65:f4:f4:db:7d:17:
06:b5:f5:e9:0f:d2:d6:f6:b4:be:ab:bf:a0:bd:f4:f4:67:fd:
69:8c:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 29 15:42:10 2024 by rpki-client on console-fra.rpki-client.org