Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer (raw, json)
Hash identifier: 7wUSDgv44444aey2ypY8mXS+PjaKpPY0K7YdSmBfaxo=
Subject key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 51F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Feb 2024 10:29:45 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.222.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20984 (0x51f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 12 10:29:45 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:e9:3e:ff:1f:66:c3:af:13:02:76:4e:f9:
89:08:20:5e:63:f1:59:cf:11:4f:dd:60:a7:de:e6:
3a:03:66:98:a4:4a:94:a0:a6:20:1b:f3:34:95:d5:
39:1d:3b:41:e5:aa:fa:a3:bb:e0:51:16:43:a9:bb:
2b:8f:cb:09:1f:2d:47:71:10:71:ca:4b:17:db:c5:
85:83:be:ac:36:92:8e:c5:59:76:de:bc:26:14:cc:
80:d9:15:ad:44:06:f5:d2:0d:f3:b4:da:27:17:e3:
e5:d3:50:7a:50:0c:09:89:b2:21:79:38:8a:21:c9:
8a:8f:ff:f3:07:5d:50:9e:24:ed:71:a5:a5:4c:8e:
f8:9e:ed:27:8e:57:e9:39:50:7f:ba:58:3a:43:e7:
13:62:1d:c8:ee:90:39:a0:b6:7a:b3:d2:12:49:ac:
f4:45:68:6b:cb:85:f1:a3:a1:55:c2:6f:2e:d2:14:
75:72:3b:8e:48:5f:33:94:a0:d3:91:1b:8d:7b:4c:
95:14:a0:d4:2d:30:4a:48:0d:7a:ec:34:19:78:8b:
81:fb:6b:59:ae:e2:1b:6e:3e:78:13:06:02:0b:6b:
cb:95:af:21:b8:89:09:fb:50:57:6d:be:40:43:98:
bd:02:07:f5:2b:c3:77:95:63:8f:3c:40:38:1f:ad:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.222.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:4d:fa:c4:0e:83:c3:45:69:6d:f1:cd:47:0f:8d:f1:88:bf:
9a:d7:9f:c3:ac:05:2e:73:46:bd:9e:20:52:02:90:ee:d0:1e:
3a:1c:ce:ec:11:85:aa:4d:e2:3b:89:5d:4b:53:cd:6a:b2:42:
af:d0:e3:64:2f:a0:27:95:ce:56:b7:de:ce:8f:9e:5d:c1:e6:
b0:fc:1a:f0:7b:38:eb:58:2c:c3:5a:43:b9:9b:b8:c3:f3:ae:
ba:2b:d9:b0:35:42:95:16:ad:59:55:75:44:dc:30:d4:43:aa:
4f:84:00:35:06:dc:46:b5:55:cd:87:56:26:e0:42:80:d8:57:
5d:bd:8c:3f:e2:a1:27:a5:01:45:de:22:9b:ad:45:00:29:d8:
3e:cc:d7:80:fc:3f:ee:36:34:e3:bc:d3:1e:de:9f:cf:49:c9:
f6:27:99:fa:f2:d2:60:c7:5f:bc:d4:48:68:2b:62:12:cb:83:
ba:62:b8:c4:34:05:d0:86:33:77:f2:ca:8b:b0:3b:35:91:0b:
05:d0:17:71:62:25:40:c2:e6:71:e4:a6:a8:6b:38:cf:36:fe:
c3:07:dd:df:6c:dd:ed:3f:2b:e6:d7:fa:c1:de:5e:d0:b9:87:
0b:c8:75:c8:7a:a6:a3:fc:24:69:77:a4:70:f2:6c:df:94:0e:
05:cc:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:41 2024 by rpki-client on console-ams.rpki-client.org