Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
File: qCkvYgTIIT15H6bMqvV4UZTvgaA.cer (raw, json)
Hash identifier: kMfPxpGDHtThLLXZnSIpaMgH0mBy04MtB6GVUdnokGI=
Subject key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 17 Nov 2024 18:59:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.247.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24071 (0x5e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 17 18:59:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:3a:ea:2f:e1:6f:45:66:f9:b7:f2:e6:c1:
94:6e:33:e0:63:19:4c:70:3f:54:fe:38:7d:cd:73:
8c:a0:fa:df:6a:1e:28:cc:f4:e2:84:24:d2:3d:e0:
c7:57:4b:f5:60:23:03:d5:9a:1e:fa:3c:af:68:ee:
db:5b:82:68:e0:68:94:ab:55:16:e2:83:55:32:3a:
b2:a1:78:d5:05:2b:11:f6:2c:bb:5a:a5:28:99:e4:
65:4f:bc:bd:62:f3:74:56:5c:ee:4a:85:d5:61:8c:
0f:ec:0d:72:66:da:f0:eb:0e:68:5c:0d:03:29:4a:
4d:da:b1:74:8d:af:44:74:20:05:6b:9a:bc:70:d8:
df:75:fd:29:ee:a1:8a:40:a6:f2:0f:cc:f6:d3:73:
b0:09:90:2c:60:73:73:ec:4e:26:0c:a0:94:77:bf:
06:69:eb:a1:17:4d:d3:4e:d2:7e:cb:e2:dd:3e:2d:
67:16:45:ed:65:0b:a6:e6:40:de:2c:9d:91:64:59:
76:d4:b3:a9:85:f0:91:91:74:65:9e:15:aa:01:a4:
d3:9c:1a:47:d7:64:b9:88:0d:da:0d:39:f0:3e:fe:
f9:14:d2:29:c6:a3:f4:c5:f7:5e:8d:28:53:40:30:
c7:4a:c6:5c:3d:6f:48:de:87:ef:59:ed:83:b2:4f:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a3:f9:b0:14:39:a3:fe:ae:dd:07:c0:64:69:63:b5:8f:59:
b0:e0:21:de:a7:a6:94:2e:f1:ff:0c:d8:f8:b4:09:82:59:e0:
ef:93:2a:43:c1:ce:2f:9b:4f:d1:47:1e:9c:d5:f8:ba:55:b6:
f6:57:a5:31:c9:0a:34:d9:7f:d3:78:c2:f2:c3:42:27:52:69:
1c:05:47:42:1d:7b:b7:0b:02:83:13:f2:8f:b4:47:29:ab:80:
0f:d3:12:1e:c7:3d:ef:82:14:90:15:93:0f:6f:05:fa:12:c9:
8a:41:52:e0:d0:68:1b:10:3b:1b:7f:4f:73:c7:48:89:6c:d1:
70:a6:63:9b:dd:94:cd:e6:f3:61:ac:47:e0:22:38:3e:60:aa:
0a:6d:8f:62:c7:3b:78:fa:d7:fc:a6:17:cc:29:27:36:03:a3:
a0:d8:3d:69:01:58:48:0c:8d:48:9e:67:64:22:8b:94:09:e8:
90:33:68:24:9d:6c:f1:47:86:44:df:b1:bc:5f:45:cd:ea:ec:
4b:e0:86:e4:3b:d7:f3:1c:67:e1:c4:5b:7e:7a:bf:d3:00:0b:
2d:5d:db:84:02:86:88:be:af:ed:70:82:a6:a5:e3:37:9b:3d:
1e:76:ec:fd:d4:a0:19:0e:fb:f0:70:45:7e:b1:50:ca:9e:c5:
d1:16:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org