Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer
File: pFVIOEAp8fN2pyJjKU0GWujJRCI.cer (raw, json)
Hash identifier: vXDxCzxJ1v1/h7FL0pYbCH1WWZ8GQEIxWVnmxqLXSgw=
Subject key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Dec 2023 13:41:22 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 192.100.77.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20376 (0x4f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 26 13:41:22 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:bc:2c:d3:73:d7:c0:1f:3e:c0:60:d3:72:
4f:b7:b1:35:59:15:5a:c7:80:6f:83:97:c4:78:89:
4b:7c:ea:01:4d:29:9e:f6:a4:b7:33:66:c9:0e:b0:
79:c0:b2:cf:9f:1a:3e:d0:c4:ad:59:01:5c:96:c9:
84:cd:40:46:6e:de:a2:d0:b4:97:84:a2:d2:13:94:
87:0e:4b:40:7b:89:d3:51:84:78:7b:2c:5d:bd:16:
1a:a7:01:64:11:14:14:99:0f:ab:1a:32:9d:61:6f:
da:f9:94:ac:9b:15:3d:88:b3:77:21:27:10:fd:4a:
c3:f3:bf:ec:ad:c4:97:0d:6e:6f:09:0d:62:56:79:
29:c7:fd:66:4c:9f:0f:82:0f:13:ff:6c:05:2a:cd:
e3:9c:45:e2:cf:f1:90:3d:f4:ab:55:62:d0:46:d1:
71:69:79:22:eb:46:37:9f:c2:92:1b:40:37:4a:d9:
60:f3:e3:be:58:bf:bd:55:f6:80:77:a1:77:12:40:
ac:1d:36:38:3e:3f:b7:98:d1:3b:75:e7:cb:ed:bf:
56:5e:46:f1:81:17:0b:a0:12:d7:9f:35:63:96:06:
f3:3d:e4:87:2f:a6:2a:dd:87:3c:73:49:80:40:f4:
8b:a0:08:4f:1b:50:d4:b2:7e:4f:0d:82:7d:cd:eb:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.100.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:29:65:51:df:b0:90:ee:f5:bb:99:61:90:d3:64:b9:3b:f5:
85:01:56:60:7b:5d:4b:ad:fd:34:16:49:6e:67:c4:b8:26:f2:
60:ab:d9:9d:db:d8:5a:33:f0:89:c9:21:ec:97:35:9e:55:3b:
fd:fa:a4:f6:98:d8:fb:0d:c9:2b:56:c6:9e:fe:5f:36:5f:03:
c8:e8:d3:30:9c:a3:e2:8b:ee:d1:f3:3b:0a:9c:5e:b2:68:77:
d1:1b:c0:62:d8:d5:53:67:47:61:21:63:b2:75:fb:d5:89:6e:
2b:6c:b7:3a:f2:e9:3d:f5:b8:bf:b0:38:a5:55:3b:d0:d0:df:
b9:d3:8e:ea:ae:03:3b:8a:d8:1c:b7:52:0d:99:fd:1f:b2:9f:
14:35:c6:7a:63:52:e6:f3:b4:94:c3:a5:f7:c5:51:80:77:d4:
e3:13:28:7a:f0:25:be:52:3e:ba:17:3e:5e:9d:a4:94:80:3c:
e5:b4:c1:ac:ae:b7:fc:75:cd:15:29:26:85:0b:4a:2a:b4:19:
8c:17:a3:7f:0e:11:63:35:d8:cc:89:cd:40:aa:5d:2e:dc:e5:
d3:da:ba:6c:13:1e:8a:d7:7b:05:a9:e4:31:b1:52:23:b7:a1:
34:4e:0d:d2:b3:7f:0b:e8:0c:2b:fa:fe:c9:42:91:5d:dc:e5:
ec:97:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org