Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.cer (raw, json)
Hash identifier: J2I6mXkfDNgXPUPr8tqYwR3+0VE9ufAIomvCTwOtwzM=
Subject key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Nov 2024 23:53:19 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.250.73.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24165 (0x5e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 25 23:53:19 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91A6F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:75:bf:ec:a4:41:e3:e8:3c:c3:af:88:e7:
82:e5:6e:f5:7c:8a:fa:48:3d:b3:e4:bf:ee:d9:84:
d9:8c:fb:83:9c:c5:39:7a:53:ac:57:03:0a:f7:aa:
6d:44:f0:9e:1c:be:be:13:5b:db:a2:12:b3:6a:3d:
14:b1:4f:ac:b9:d9:7d:4c:08:d6:0f:ed:e8:39:6e:
23:c2:87:ac:26:51:35:cb:40:0d:19:17:1a:3f:31:
15:01:dd:0c:d4:a0:50:9b:72:22:1c:60:f2:8e:f0:
16:33:52:a7:47:81:e4:35:49:3f:8a:f2:26:e8:cd:
da:c3:39:c6:39:d4:f7:90:0f:6c:05:4a:1e:bd:ff:
d8:10:cc:cb:c5:6c:67:29:eb:3a:e0:c5:40:f2:ac:
63:72:2b:36:9d:f8:1d:30:66:35:8e:5e:79:fa:92:
77:4a:b6:58:da:ea:63:74:e9:ca:71:04:2a:6c:a7:
04:5d:2c:a8:5f:3a:7e:05:79:9b:97:cc:74:b4:31:
b6:b8:d7:52:a9:b9:4d:a3:4b:31:17:0f:53:31:22:
e8:ed:85:fb:cf:ec:34:fa:c8:23:5c:d3:17:56:d7:
ec:2e:a3:41:01:a8:a7:7e:39:19:40:1a:2c:ff:e2:
2b:2b:2a:9f:65:8e:74:d3:be:39:8e:6b:d1:a2:88:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:00:66:95:36:5c:e6:31:7b:ca:cc:14:7a:1f:69:0e:2c:6d:
ba:9e:e7:7e:9c:db:e1:17:33:49:a5:2b:7e:68:09:15:f3:96:
a3:93:3a:8b:f7:02:6f:fe:6b:a5:f0:73:e8:77:a3:7f:dd:27:
6a:0f:cd:ee:de:bf:a1:fd:0c:e1:10:dc:a1:bd:7f:f6:de:d2:
62:6d:07:b9:dd:b3:3b:62:ec:dd:ef:35:ed:eb:5f:a4:0d:91:
93:ac:94:93:05:64:c0:19:f5:8d:b5:90:8e:39:b1:26:e9:d4:
5b:ef:b1:57:ae:2a:0d:fa:2a:bd:be:4b:fc:e8:8c:87:23:e7:
83:8d:65:96:ae:51:52:e9:28:6d:50:9a:eb:88:08:4e:4d:a6:
f0:29:9b:d6:f7:ef:69:24:74:fa:18:42:14:79:b3:d0:63:39:
fa:d1:4b:89:6c:2c:35:c3:31:6e:f9:22:97:30:4f:00:d1:fb:
c3:9a:88:dd:2e:ea:4f:5f:2a:f9:aa:da:25:da:8f:6e:97:3a:
8f:7c:b8:05:83:33:b1:c5:5b:86:b0:fb:c8:c5:a2:fb:fc:45:
5c:b9:a5:78:11:73:e2:41:c0:f8:b6:e1:d2:cf:94:98:94:2a:
a7:d1:0a:8f:14:ab:76:47:f5:60:2e:c9:c0:4d:4d:95:1b:55:
ed:ff:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:59:11 2025 by rpki-client