Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer
File: l85Wj2RoJWRz-Es4s84D6jVJ64k.cer (raw, json)
Hash identifier: 92QwttaScuEkhzlpk/Oemge/xFfExBLQTrnXCDQbLQ4=
Subject key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4CE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Aug 2023 05:03:05 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 168.132.0.0/16
IP: 192.91.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19687 (0x4ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 23 05:03:05 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:cf:da:24:e1:3b:9f:8f:dc:8b:84:44:fa:
a4:9f:06:b5:b2:43:aa:38:33:71:e9:2e:08:5f:42:
8d:42:61:aa:ca:20:04:4b:f6:81:75:1d:e6:f8:4f:
eb:c2:19:de:fc:fd:d5:67:2b:2e:e8:d7:8c:26:b3:
4a:81:ce:e8:a6:56:00:ec:68:67:ae:f2:ce:4a:9f:
a7:c6:fc:54:e7:13:39:b1:24:20:6a:21:af:31:a8:
ad:60:25:5a:c2:41:ae:bf:08:7e:41:8d:99:39:4a:
88:a8:83:5d:be:57:b4:a2:eb:b2:6e:f8:ef:8e:50:
a0:32:f9:ac:04:83:77:34:01:c3:67:a9:47:a0:e9:
08:a3:31:2e:c6:cf:20:a0:71:fe:6e:6a:99:5a:96:
67:1f:6a:2a:bf:92:85:2c:3b:48:21:fd:bf:b7:c9:
4c:5f:d6:d5:19:88:d2:37:1c:2d:a9:5f:bb:b9:40:
d8:5e:e6:26:08:09:9b:e7:63:45:0b:cf:d0:83:41:
fb:3e:35:e3:93:16:d6:6c:44:c6:6c:1f:74:29:58:
cc:94:ec:e7:bb:d1:9a:40:ed:a8:d3:80:3b:ad:a3:
bd:97:d7:ce:58:5d:00:93:2d:bd:77:42:5b:c3:57:
92:7d:68:86:17:67:0e:d1:24:28:e1:34:95:cf:08:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.132.0.0/16
192.91.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:2d:bf:e0:d7:b0:d5:47:a0:1f:27:0c:3d:87:3e:67:07:
fb:44:a6:e7:fd:7a:34:3b:1b:a7:ab:c6:4e:f6:22:2d:4b:77:
a5:5f:fe:f8:82:e6:da:2e:12:4d:03:88:22:39:02:40:9f:4d:
ff:8c:a7:ce:be:66:93:7b:e6:cc:bf:99:03:c6:34:5e:64:6a:
e2:9c:b2:fe:cb:99:a1:9d:42:20:57:ec:9f:ab:0f:e8:83:92:
e4:f2:4d:6b:1a:18:55:5c:29:19:ea:60:b0:19:cb:e2:ff:08:
9e:ba:c5:75:b8:34:c1:7a:59:f3:c2:dc:b6:e6:d8:5e:d8:5f:
56:19:81:a0:3a:64:f0:e9:c7:20:ad:eb:be:48:b4:61:3f:e5:
72:bb:63:02:33:73:88:9b:86:07:ca:22:c1:e2:33:56:d9:99:
d1:6f:e0:65:9e:b5:bc:ce:be:db:2d:34:cb:a4:96:dc:22:21:
ea:8c:84:8d:15:41:b9:df:8b:54:d7:e5:d6:64:b5:f5:cd:1b:
7f:7e:83:87:3e:6a:54:87:7a:61:14:8d:69:27:98:95:ae:4d:
66:5e:df:cd:e8:6e:52:f0:8c:2d:5c:c7:11:9e:5c:31:bf:be:
cf:b9:ef:4d:40:e2:1a:4b:52:fa:b0:8a:30:0c:aa:ff:1b:18:
e9:30:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:34:23 2024 by rpki-client on console-fra.rpki-client.org