Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
File: kTOsvs_e7PTaOiIigng09bc6-qc.cer (raw, json)
Hash identifier: o19cfK/x8Pg3v0AkDXRkiV0nj+7mcYT7k3+NgZPY3+U=
Subject key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 56E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Jun 2024 04:49:17 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.22.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22246 (0x56e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 18 04:49:17 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:dd:15:fe:35:f4:45:86:a7:3d:fa:37:72:
db:b3:75:f2:c5:d2:d4:e8:16:2f:fe:0f:68:b2:98:
e6:33:9f:b8:48:2c:13:7c:c0:b1:d5:b2:c1:92:a2:
92:fa:5f:02:f3:ba:02:1e:5a:31:0e:4f:b6:2f:93:
4c:9e:cd:f2:3f:0f:ef:d0:ec:d6:82:bb:60:4d:57:
2e:66:69:36:2d:dd:7c:71:6f:0e:a0:a9:bd:74:44:
8a:15:d7:75:03:a4:b4:19:fe:87:eb:c2:7d:3f:1e:
a2:62:e8:1b:e0:0d:8e:8d:c5:87:16:d3:54:60:d9:
a7:54:d7:9a:61:01:b2:89:63:79:bc:61:df:e3:58:
63:06:a9:3e:8d:74:6a:fc:ba:2e:8e:d2:92:db:fc:
d6:a3:03:70:d6:8d:82:68:45:d4:8f:43:d6:30:e5:
1d:a8:f8:54:5a:8f:8e:89:06:2a:cd:12:85:12:b1:
2a:94:b8:6f:55:df:b2:68:1d:52:9e:53:a8:e0:19:
b0:94:8a:6c:d9:59:d8:f3:79:f7:97:fc:1d:e7:4d:
3d:73:32:16:49:23:c0:7d:1c:4f:98:af:fe:25:5e:
ad:7a:b9:5f:1a:76:80:e0:10:9d:7e:ab:a1:88:5a:
90:c2:7b:46:f7:9f:b9:80:e5:a3:5d:65:13:22:c2:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.180.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e9:7b:3a:df:b0:24:1d:e5:f7:a8:15:1d:a6:8d:e0:8c:68:
2f:9d:c3:12:17:ce:d1:ec:ec:ae:c9:7c:61:85:22:54:41:10:
32:79:6b:ab:ce:95:e7:07:cd:3e:9f:d3:27:99:16:90:2f:c3:
62:f3:3d:cf:e1:8c:c9:dd:8a:bd:b8:4c:6b:0f:cb:35:a7:3c:
74:8f:63:6f:48:de:64:4d:85:9f:08:8c:9f:36:08:70:b8:f4:
c1:f6:3e:f5:1d:da:f7:45:a9:3f:24:94:8e:cc:d5:73:47:79:
c4:b2:a5:42:e7:75:b7:dd:2a:cb:26:d8:60:05:9d:7d:a9:b8:
21:df:8e:5f:3c:48:b4:e1:9e:86:8b:07:c6:57:9d:9a:f5:09:
18:55:4d:2d:66:49:e8:0d:ab:d5:aa:10:66:6f:07:ee:1a:19:
12:a7:c7:27:c4:c6:00:29:bd:db:94:40:de:86:80:fb:2b:ac:
2d:81:04:b9:46:87:b9:81:6d:13:50:7f:ad:8b:f6:99:49:76:
9d:7b:cf:1f:57:49:91:9a:61:f0:26:25:fa:5c:71:48:79:b9:
c7:bc:84:5a:03:a4:3b:48:20:2a:34:8d:39:f0:98:41:b9:b1:
5c:69:0f:49:84:7f:18:cb:6e:8d:53:dc:a0:3b:24:c4:1d:76:
bc:7b:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:17 2024 by rpki-client on console-fra.rpki-client.org