Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer (raw, json)
Hash identifier: Pp/iqbxKEsHvYZo/9CBJncgTmsu6OK4oKKZv7o6xXOw=
Subject key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Jul 2024 22:03:13 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 148.195.0.0/16
IP: 159.73.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22755 (0x58e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 24 22:03:13 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:d6:00:cb:f5:4b:39:4a:7b:7d:9a:05:8f:
e5:09:91:9d:c1:34:1e:66:9a:aa:14:d9:3a:56:fe:
42:c3:8d:c5:3b:0c:9b:ee:36:65:a6:6a:bb:2c:5b:
61:34:a8:a8:11:f3:ee:e7:10:5d:a3:09:d3:23:50:
dc:22:5a:aa:94:e8:f1:f6:4e:6c:5c:ef:31:fb:8d:
31:60:6b:be:37:9b:f7:77:f7:e5:d2:00:bd:84:79:
8f:92:fd:46:aa:7c:58:64:51:82:6a:7d:bb:1a:ff:
13:f0:3e:e9:44:2b:45:30:ec:97:67:f3:0b:5a:63:
40:e2:06:09:0b:4d:75:bc:bf:c5:a0:72:62:f8:c9:
2c:62:1f:b3:af:d1:26:b5:76:ef:e3:65:96:75:56:
8c:e3:4d:8b:df:e8:70:c8:e6:56:1c:9e:4f:6d:a6:
fe:b3:89:a4:ef:e8:34:f3:d7:38:44:58:7a:30:42:
9f:ca:90:5a:a5:93:35:bd:b0:98:5a:70:ae:7b:2e:
2d:cc:2d:06:17:f7:80:1b:5e:1d:0a:b8:1d:0a:d6:
ce:38:48:71:4c:67:23:11:d2:d8:09:7d:e9:c1:8f:
70:22:ed:1f:ec:2f:8f:e7:21:83:a9:f3:0b:cf:e8:
4f:bb:34:a2:ad:bb:ce:57:03:f3:e1:13:74:3a:6d:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.195.0.0/16
159.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:5c:44:1d:06:6c:07:2a:ad:fa:4c:33:18:fc:d0:d2:c6:8e:
60:08:84:4e:e3:90:b0:35:6f:d7:75:7a:4b:0d:ae:25:52:43:
a5:5f:4f:e4:91:b8:c5:06:34:11:18:be:5c:ad:5f:5a:95:c0:
01:0c:71:4e:7b:13:f2:1c:1f:6e:35:e3:c8:f1:eb:09:ab:0c:
61:1f:65:0a:8b:0d:77:5f:15:44:b7:c8:45:11:23:6a:40:84:
91:a1:49:7f:52:2a:49:78:aa:41:58:ab:fc:fd:7a:c0:cc:4c:
fb:60:09:29:20:a2:f7:88:17:86:63:b6:c3:d2:d9:dd:1c:72:
f5:da:25:ef:38:9c:da:2c:1c:1d:fe:aa:c9:48:f1:86:c2:85:
af:1a:06:00:68:e4:27:1a:db:3c:30:d8:18:b2:d8:25:79:25:
ed:bd:22:a8:b9:9b:0a:21:df:c7:ca:cb:3d:97:c2:13:01:d3:
c8:a3:57:f3:9f:1f:2a:74:60:5a:25:ed:dd:23:bf:6f:9d:e0:
4d:db:0f:92:23:e1:36:bf:59:fc:c9:24:22:24:f0:96:82:44:
38:55:1a:af:d7:a1:2c:4a:03:e5:3f:fb:01:1e:f1:15:61:e9:
22:cb:51:be:18:19:4c:ca:0b:33:9d:97:6e:6e:f6:7b:65:46:
2e:d7:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org