Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.cer (raw, json)
Hash identifier: 9NoSMauFbBqU36YjWagFZ6iOjTV8LTHpXuYQ5C4oRJw=
Subject key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5894
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Jul 2024 08:51:47 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 160.20.126.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22676 (0x5894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 18 08:51:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:f3:bf:36:e4:b9:a8:b6:22:cf:69:41:69:
a5:22:8d:94:60:48:09:8a:54:0b:71:a4:f7:8a:37:
24:05:9a:c1:8d:87:c7:8d:2d:b6:4b:2a:5e:20:02:
77:72:56:89:43:7a:a1:8f:7f:e8:8c:2a:1b:da:ae:
3a:28:95:d5:41:81:c1:ae:10:b0:1f:a8:b1:32:e1:
02:aa:32:c8:b6:aa:63:04:a3:fd:e6:4d:8b:26:9c:
6c:60:f2:f9:49:9b:7a:78:92:21:ea:dd:18:c6:09:
13:76:ad:5e:50:60:f3:44:71:f7:f1:df:c4:0f:ab:
69:77:4c:26:19:1e:61:83:04:dc:c1:59:2e:d0:7c:
86:d2:02:79:ad:6b:0d:a6:1b:8a:48:b1:2d:3e:25:
92:f8:04:3b:90:ff:d2:dc:9d:98:0b:50:af:86:99:
82:8e:30:b1:dc:d1:1b:16:4d:3d:c2:f3:32:12:21:
b5:f6:49:1f:7b:2c:b6:12:2c:55:c1:2e:af:d8:b9:
c8:bd:e8:40:5e:e0:35:de:70:d5:bd:95:46:59:8c:
4c:eb:be:77:17:45:c7:90:f3:a9:82:dd:d8:89:18:
f9:cb:1a:c4:07:69:d3:c6:34:d5:ac:39:b5:27:84:
80:cf:5b:4b:f6:b1:6d:c1:4e:94:ad:0c:cf:18:d4:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
32:77:9e:3f:09:3e:1d:cc:82:d1:4c:de:25:e2:8f:d1:d5:ec:
13:0a:d6:ba:1a:ab:01:d7:a2:ef:68:60:93:1b:84:86:54:a6:
79:4d:00:98:37:2c:c3:81:2b:77:9c:6b:cc:9e:fa:7b:13:fe:
a0:35:a0:5b:a0:13:8a:a4:49:85:fe:94:76:57:4e:79:a0:b6:
7a:c2:9d:b8:34:b8:a2:dc:36:55:db:30:e6:09:4d:bf:91:35:
a9:8b:f6:fe:0c:c5:ae:68:fb:48:3b:63:55:35:ce:80:5d:a2:
f3:71:d2:a9:38:ae:32:76:f1:c1:2e:4f:44:ef:f2:f9:b5:8d:
71:f8:0c:07:c8:28:ca:5a:aa:22:ed:92:f5:a4:21:7e:0b:7f:
a5:f0:ef:db:a6:76:ed:6f:3a:6b:a0:83:3e:a0:9e:5c:63:b8:
ae:5d:a3:29:8e:91:7b:10:16:4a:4a:a3:ff:bb:02:9a:90:ab:
0d:21:66:4e:13:4e:75:59:8c:95:7c:dd:41:d1:8c:37:bb:63:
db:76:8c:9c:d3:c5:4c:38:e4:c5:3c:a9:71:6c:c8:6c:8b:56:
73:d2:38:ca:ff:95:cb:d7:46:af:c5:20:8e:51:b7:70:53:0b:
c8:4c:d4:07:9c:ca:59:ce:b4:40:ee:71:d3:eb:c8:15:71:24:
e7:59:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:13 2024 by rpki-client on console-fra.rpki-client.org