Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer (raw, json)
Hash identifier: WQdJxkyda68C3qtDcePkg1snwx6644zXA0dPqY3iJks=
Subject key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5C3E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 12 Oct 2024 08:09:14 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.190.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23614 (0x5c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 12 08:09:14 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:bf:2d:87:0b:a9:28:39:75:e4:6b:f3:98:
1d:82:c2:a1:c7:80:28:9e:3b:83:b0:da:f4:0a:3a:
94:c5:37:d1:cf:c1:cb:5c:74:c3:43:9e:7a:43:74:
f9:88:12:bb:72:75:c3:bd:6f:ef:f5:8c:af:62:bb:
21:7c:cb:82:88:f0:2a:8b:07:f4:19:43:63:25:7c:
b9:73:41:dd:3a:e3:da:a5:77:51:da:dc:80:17:ec:
93:8f:04:9c:32:04:37:2c:0c:54:83:73:4a:4d:3a:
d9:ed:8c:87:9c:4e:3b:6f:a3:ae:dc:d6:79:03:31:
eb:d9:e3:59:a2:75:28:97:cc:cc:c8:fb:3c:f2:37:
71:a3:bc:39:20:97:55:07:71:6f:f9:fb:20:7d:a2:
dd:ea:15:fb:6d:12:c8:de:8a:ef:22:6c:f8:10:eb:
72:ac:8c:aa:9d:87:5b:40:12:14:e7:fa:dd:49:65:
fc:c0:6b:a7:9d:ce:7b:4b:1a:3c:fe:78:c8:72:61:
1b:ff:64:a6:b8:54:d7:0d:e0:ae:30:42:48:3a:37:
4a:42:9a:8b:a2:d5:da:ec:99:2e:77:27:6a:76:21:
af:0b:52:65:4c:da:d4:ff:6b:2d:f4:23:93:e8:f6:
cb:bc:00:c5:a0:6e:56:00:f0:b4:c9:d2:5c:b7:d4:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:58:54:f1:a9:02:25:0a:90:54:f7:de:bc:0f:52:01:63:17:
b6:78:e1:10:aa:18:1d:95:70:0e:df:97:4f:ff:af:4e:e1:3c:
41:ea:a7:84:1c:b1:1f:f9:d7:37:d3:c1:6b:46:df:e5:b6:45:
8e:d6:47:0d:1b:e8:4e:e2:1d:cf:52:ed:ac:32:29:51:64:f8:
27:c8:16:7c:5f:72:a8:1c:db:d1:e1:63:2b:34:58:d7:0f:83:
50:9b:b7:7c:06:4f:8e:ad:60:bd:64:b5:7f:94:30:ab:85:9d:
dc:8c:81:73:e8:14:eb:79:6d:c3:c2:eb:ad:6d:80:8a:a3:1d:
29:9d:d1:17:19:c5:8e:64:d8:7f:a2:8f:e3:b8:70:b5:82:f2:
d0:29:56:94:6e:f6:19:6d:8f:b7:6b:d8:2b:32:12:c3:4d:12:
27:f9:3d:1b:60:9d:a4:39:07:84:41:a9:87:94:88:6d:d6:5c:
30:c8:72:f8:63:38:c9:c1:ce:c5:0e:2e:16:de:14:3f:eb:9d:
4b:a9:24:f5:f3:0e:d7:89:13:2c:78:65:07:3c:74:65:da:c2:
c1:0e:48:ca:e4:5a:d2:29:29:12:57:2f:0f:82:89:c0:c2:7e:
08:ff:80:90:6d:66:1c:00:29:d3:26:b3:8e:26:ad:68:7f:b7:
58:9d:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:01 2024 by rpki-client on console-ams.rpki-client.org