Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer (raw, json)
Hash identifier: F5nuBEoQxeYB8OF+vhRW3nvC1Nd89WViAR2Gdv7g1n8=
Subject key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Nov 2024 07:43:58 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.82.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jan 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24174 (0x5e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 26 07:43:58 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:e4:39:53:c4:80:f9:5b:3c:ad:47:ab:47:
47:97:4d:80:f2:3c:98:dd:a8:82:ab:48:c9:fb:f8:
6a:a6:da:14:e0:8c:1f:05:a5:69:c0:a3:24:66:de:
cc:44:5d:35:23:e6:11:72:96:3e:78:f2:97:ec:c2:
2f:56:63:dc:4c:d8:29:cf:21:e9:20:c4:c4:6f:8c:
97:55:f5:ea:ed:37:9c:84:fc:74:aa:d0:81:c2:87:
1c:4d:92:16:1f:3e:1f:27:92:1b:07:47:55:87:b4:
64:4f:2c:0d:8a:c2:ed:a4:36:27:e6:e5:87:1a:11:
63:4a:74:5a:1c:6a:fc:02:05:39:e1:a0:d2:1d:66:
de:4a:1f:c9:3f:00:4f:a8:fb:25:78:fd:a4:fb:08:
18:ca:14:5f:17:1f:1c:6e:d6:3d:ad:2a:3e:18:58:
8b:d4:aa:a2:39:a2:a9:83:61:48:66:76:bb:53:c3:
6d:14:1b:b0:29:d3:81:34:ae:a9:05:93:76:11:b8:
09:42:a1:7c:ed:af:e3:47:8c:52:7f:ef:3f:90:40:
e1:cb:a1:1e:69:36:29:92:dc:9d:69:a3:a8:34:b8:
b3:84:65:4c:3e:c3:92:17:d0:46:50:50:72:f3:6c:
6e:03:b3:7e:93:11:f3:dd:ce:9f:b8:11:c4:67:bd:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.82.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0c:74:57:38:eb:b3:6e:c9:3e:d6:ee:39:83:8e:bd:f6:7a:
2d:45:31:23:cb:85:c1:ab:d0:d4:64:63:cc:03:1d:2d:28:e0:
b0:9f:98:e4:9b:18:cf:33:a0:2a:64:31:20:b0:3d:0f:02:90:
be:08:6e:39:36:e0:2c:73:c8:ef:e4:a1:62:e0:a1:f2:5a:9f:
a9:9c:82:3a:68:7d:e0:a6:00:84:ab:25:9d:40:a1:4b:f8:9e:
95:e5:88:5b:d4:84:33:b6:86:27:09:e2:06:03:03:39:de:75:
eb:42:7d:d0:1e:e1:93:95:1a:06:f2:72:93:36:f1:15:bb:c1:
8f:91:3b:fc:9c:d7:9e:ca:59:32:ef:ab:b9:b9:6e:c9:8f:97:
a2:f6:9f:47:6e:93:b1:81:59:e7:bf:ca:17:3e:0c:b4:bb:4c:
f9:5d:7a:a5:6a:85:d5:73:9c:01:19:ec:a1:f0:83:5a:c6:ed:
9b:e8:98:7b:6f:d8:21:b2:5b:16:f3:fd:c9:90:30:2e:56:f3:
20:42:a5:28:ad:6b:1b:d4:dd:32:2c:cc:81:00:7c:02:7a:78:
67:ad:5d:18:e4:05:a4:c6:ac:78:52:04:52:9b:8c:ab:5a:9f:
80:1d:25:0b:21:55:91:fa:9e:ef:29:fd:fd:11:da:2d:c7:25:
32:3d:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 29 15:42:11 2024 by rpki-client on console-fra.rpki-client.org