Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
File: kQglePceS4YFfcPrBwP-ZYnmaJE.cer (raw, json)
Hash identifier: xGtqEKXtYaWxXCFRInK2fyhVChVXGBPCmVibGOugC9k=
Subject key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5DB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Nov 2024 04:02:27 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 204.15.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23991 (0x5db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 13 04:02:27 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:59:ad:a9:5d:c7:16:b9:07:b1:5f:ee:63:
3a:12:b6:d7:f7:31:77:57:77:d7:e2:1b:18:26:fd:
20:ad:2d:c7:a1:a6:06:1e:a6:05:14:ed:43:e1:ac:
e8:f4:7f:27:dc:87:66:24:51:5a:ac:c1:a4:6a:07:
80:fa:49:3b:6f:f9:58:47:6c:20:8f:22:e2:30:06:
aa:6c:4b:55:10:51:c7:78:5b:66:7d:35:8f:ba:aa:
bb:7b:4e:35:79:17:8d:1e:b5:25:e2:98:71:b3:85:
db:9b:8b:81:98:89:8f:ec:50:b6:be:c3:6b:a6:a4:
70:c7:b0:41:0a:54:58:02:b4:87:14:f3:48:c1:e8:
ef:b9:6d:20:0f:f5:09:0d:3c:ff:68:44:07:61:12:
f4:5a:d0:8a:cd:7f:7d:fe:4c:9d:73:a0:f0:fe:e8:
b5:c2:c0:ce:e8:42:92:72:cb:25:fc:ef:1f:a1:09:
5e:57:b9:3c:01:c2:cf:d3:93:71:70:f7:40:8f:50:
da:af:85:3c:9c:e7:c9:19:77:9a:00:1b:ac:13:4e:
c8:5f:aa:9e:d5:12:44:88:2a:75:ad:81:16:eb:12:
56:29:76:4e:1b:92:a0:89:2d:f0:f6:2d:1f:2b:c6:
6d:f6:84:e3:37:8f:cc:24:19:e4:88:bc:b9:dc:ad:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.15.40.0/23
Signature Algorithm: sha256WithRSAEncryption
92:a3:56:d6:c8:09:fe:b2:04:78:0d:9d:8e:74:3a:97:ed:31:
3c:57:b0:bc:eb:10:a5:18:15:ad:60:d7:fa:6a:76:bd:fc:06:
72:3c:19:3e:2b:1a:31:5a:3d:0c:c4:0e:c1:e4:5b:99:a5:b5:
87:8d:8f:b8:33:27:4b:54:02:7d:1d:00:5e:e8:47:75:b4:4b:
23:d0:c0:b5:de:d7:0c:2a:41:d8:08:7b:07:e6:00:e8:78:23:
b0:38:e5:2a:de:08:e2:fc:81:b2:f1:3d:87:f9:d7:5c:44:1e:
45:33:74:52:8d:1d:24:d9:d3:82:61:2f:16:6a:f1:5e:0c:b6:
d1:f8:33:0d:98:04:4b:f6:fa:57:66:2d:2d:90:32:54:f7:90:
84:84:d6:fb:9d:2f:3c:8b:04:9e:4b:29:e7:60:c7:13:13:f5:
f9:c8:1b:c8:3c:e8:86:8a:d7:db:fd:da:78:db:fd:38:59:ac:
1a:ac:a1:f5:2c:b8:86:e7:7e:57:b0:1e:65:5b:b7:b5:95:e9:
56:4e:ee:3b:a0:a3:6e:55:ee:18:29:5e:ba:0e:5c:17:d1:60:
01:25:59:d5:73:75:4f:72:80:6f:64:ae:14:46:ab:c0:ca:4e:
23:43:80:37:c5:80:9d:e1:f5:19:1e:1a:d4:89:8c:de:a7:15:
fb:3b:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org