Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer (raw, json)
Hash identifier: PjUkhY4jlbKsJweMat9UUJMvvVSzcxmb0Qbi+VokKEI=
Subject key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5867
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jul 2024 05:02:59 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 160.25.184.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22631 (0x5867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 16 05:02:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:50:27:e3:3c:c8:11:22:17:c0:25:51:c7:
19:41:dd:98:87:99:e3:3b:63:d6:a5:79:0f:4b:f5:
7f:6a:23:e4:f9:32:a8:8f:a1:bc:fc:1e:ab:1d:9d:
ac:b5:8e:05:88:e9:a7:ff:9f:69:55:f8:65:14:65:
60:66:aa:37:d2:0a:d7:6a:01:0e:76:90:51:2c:06:
3c:34:5d:2e:42:bd:44:32:33:dc:e1:ac:6a:47:d4:
53:0f:9f:c1:18:19:f9:13:5a:1e:70:3c:9e:28:69:
b8:5d:a3:3f:61:b6:4f:9d:1e:f7:a4:eb:66:50:6b:
57:f9:2a:27:53:d0:27:04:c7:87:61:b3:52:8a:1c:
20:39:fe:f6:75:bb:7f:a5:ff:62:4d:3f:99:7f:58:
07:b2:00:0d:5e:14:90:b7:67:25:ac:84:f8:21:83:
d1:7e:58:0a:cb:a3:d3:50:a4:8d:91:1c:d5:9d:69:
8c:53:0f:1d:77:54:46:e4:0e:f5:b7:bb:f1:ce:40:
1d:62:b8:2d:14:8a:eb:d8:09:4e:ca:fd:04:5a:cf:
bc:f4:d5:ab:ff:3f:67:ce:57:a9:6f:8c:aa:63:2b:
75:3f:3d:f8:30:3c:d5:a4:a1:94:e0:64:9a:65:28:
02:70:0e:64:8e:ca:1d:8b:97:b2:e7:c1:9d:d5:f3:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.184.0/23
Signature Algorithm: sha256WithRSAEncryption
14:09:d6:ec:72:fb:36:db:c6:e0:9e:46:7b:4e:02:9e:4e:7f:
dd:9c:5b:cc:18:64:d4:f8:69:f0:33:09:40:5e:0c:2f:1c:0a:
86:d4:c5:10:1d:9c:d5:db:04:53:13:22:69:2b:cc:b2:b4:72:
7d:da:b6:db:0c:29:b2:e9:d7:ee:df:f7:d1:6e:9d:46:f2:de:
cd:43:49:7c:1b:04:4d:3a:a7:3d:cf:f3:8e:32:b7:70:49:6e:
af:76:49:46:74:09:20:db:45:27:4d:fa:65:36:bc:65:71:0c:
c8:a5:71:8b:2a:ac:3c:65:55:6f:df:0d:3f:59:74:35:b2:d3:
cd:75:00:38:70:c4:5a:b0:84:6c:06:b9:e0:46:fc:52:14:d4:
46:75:e9:78:ef:c8:8b:1a:df:d6:50:40:0f:a2:a1:86:1e:79:
94:1f:b2:54:fa:ec:a5:71:e2:d0:fd:cf:0b:33:2b:e6:43:f1:
38:36:35:bb:bb:17:28:df:b4:6f:23:d9:90:e0:12:ce:c6:09:
9a:08:5a:b1:96:3e:f4:db:f7:f3:7a:cf:be:fd:c9:01:ae:3d:
48:e0:78:99:f0:b8:fa:e2:c6:5a:4c:9b:ad:2c:8d:12:73:eb:
62:0c:13:71:6a:82:39:4d:d1:a4:ca:1b:a8:55:06:74:24:a7:
dd:87:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:17 2024 by rpki-client on console-fra.rpki-client.org