Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
File: lddEZYkqyDm6JHn6BHVqXjBfJjw.cer (raw, json)
Hash identifier: 7e5OjOUhRGPYb9DXOHS/KDoQ5IKewLiKLfTxiaDpLQs=
Subject key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4DD6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Oct 2023 04:34:15 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 192.189.34.0/24
IP: 192.189.229.0 -- 192.189.232.255
IP: 192.200.64.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19926 (0x4dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 3 04:34:15 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:e2:c2:22:2a:21:21:91:86:c4:bc:12:97:
7b:1b:97:ad:6a:37:7a:1b:51:c5:cc:eb:ae:e1:52:
51:a2:f9:aa:71:47:ce:2f:c3:c0:40:43:36:9b:d6:
61:45:ea:4c:b7:db:5b:a6:6d:31:21:19:c0:eb:21:
cd:2e:c0:f3:28:03:8c:9b:76:6d:a8:cb:29:bc:5c:
18:75:8c:16:e2:a2:9c:84:e3:71:a6:2d:85:44:7a:
58:a7:84:8f:5c:df:1c:1f:1b:d7:83:b4:1d:74:18:
9e:5d:7f:32:bf:f0:20:69:a3:65:33:35:3f:f0:33:
b8:11:96:75:03:9e:20:cb:e9:7a:8a:f1:5d:26:bb:
cb:cd:3c:9d:53:50:58:c0:dd:e1:69:99:d0:35:1e:
79:75:b1:0d:08:31:c4:90:06:0b:7d:58:9b:af:f0:
2f:bf:9f:c7:a4:54:f0:22:81:aa:45:b0:02:bf:74:
ea:a3:76:42:09:39:1d:b4:44:c1:69:d9:6d:80:d0:
9a:bb:46:d1:08:e8:9f:6a:84:e8:7d:f8:86:1a:f4:
23:41:63:d7:e3:cd:7e:2f:96:4b:18:85:2c:4a:28:
9d:7a:7c:23:0c:32:e3:91:46:99:00:db:d1:3e:25:
52:39:e7:ad:0b:21:fe:d1:b2:cd:1b:0c:62:cd:0d:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.189.34.0/24
192.189.229.0-192.189.232.255
192.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:70:ba:20:15:f9:ec:18:e8:8e:64:0d:66:9e:70:cc:2e:7f:
17:4b:de:ef:3e:d0:02:71:a7:4c:af:4b:ab:a6:2c:36:7d:74:
12:61:cd:6e:92:3b:28:aa:1a:85:a9:85:0f:fa:df:74:16:8e:
a7:02:9c:94:03:3e:15:91:0e:6c:4f:00:d6:3c:49:a3:ca:0e:
ac:9d:c7:02:14:cc:1d:a3:6a:3e:d5:ed:af:5e:85:31:39:85:
9a:84:39:39:5c:c2:43:9d:52:ab:eb:8c:72:6c:1a:be:6d:38:
40:b4:ca:fb:b2:8f:e0:97:e3:1d:a5:fe:33:58:3b:9c:59:d5:
1b:f6:bd:f7:06:32:6d:6a:df:e3:5c:5c:eb:e4:b5:df:ac:07:
61:4d:20:79:0c:ed:33:ea:40:95:66:2c:eb:55:39:da:e8:fd:
e7:58:8b:52:da:69:8e:5f:2c:3c:4c:e0:da:3d:00:e1:98:61:
5b:e1:44:f7:43:ee:d0:c6:4a:f3:d7:d6:48:ae:b5:a7:a3:90:
6b:25:c6:55:9a:8d:06:d4:9a:cc:d9:18:d6:21:16:29:9b:ab:
c0:99:69:44:6a:c5:4d:4c:44:d9:69:6b:49:14:57:91:20:d4:
b7:64:98:a2:cb:bb:fc:af:69:80:be:e8:06:ad:4e:9f:32:d7:
cd:ec:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:57:35 2024 by rpki-client on console-ams.rpki-client.org