Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
File: u9oqUrUEjxqKq79cJBcmASd8svM.cer (raw, json)
Hash identifier: V/MXmGFMI+fUfva5SHd4Tb9XkXkk5EEd1af9P8hLkfw=
Subject key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 525D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 18 Feb 2024 12:40:57 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.214.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21085 (0x525d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 18 12:40:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:25:1f:00:24:03:72:f7:4b:ef:2c:91:84:
cc:5f:6e:8e:83:bf:28:67:0b:57:3f:ca:69:5b:c2:
d3:58:ce:1b:2b:da:a0:ba:82:14:cf:cf:91:0f:56:
cf:5f:fa:0f:24:47:3e:99:a5:58:f7:cf:8d:dc:ea:
e6:93:04:bd:21:b1:8b:b6:a0:09:59:9d:d8:c2:2d:
3a:98:6c:b8:b3:c7:4e:56:e7:98:28:0f:7a:2b:da:
ed:9e:dd:d2:5b:2c:1f:d4:80:60:6b:a1:45:76:f0:
bd:24:55:1a:83:86:08:ca:e8:24:98:3e:2e:6b:dd:
e8:d1:52:b7:2e:fd:69:19:cd:a4:fe:67:54:2f:b4:
42:7c:32:d9:73:15:18:07:f2:03:06:d3:9c:3a:59:
5f:b1:00:a0:0b:83:bf:1d:db:e8:30:2e:83:f7:32:
f5:11:07:0e:1c:34:86:a1:25:25:b0:23:86:32:31:
50:7b:53:a5:2c:f7:f8:d0:20:df:08:bd:57:32:30:
7b:16:2b:b0:58:91:1f:f4:73:d7:08:16:47:a6:f2:
e1:ef:f7:7b:cd:71:7d:f1:9f:07:f3:cb:05:be:ae:
ae:2e:27:8a:21:43:2c:18:35:e6:6b:25:a6:12:a1:
59:be:86:6f:fe:75:ec:fa:a5:78:4a:43:91:88:f2:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.214.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:7a:5b:87:3c:38:38:2d:ad:cd:51:52:72:96:0e:fe:97:c9:
41:2c:58:4c:03:08:f7:7a:a7:4a:76:ad:e0:ae:39:fd:30:f5:
4e:d0:21:6d:18:22:86:25:8d:be:9e:11:35:9b:b3:ef:67:3f:
2e:8e:57:9b:e7:76:04:23:4f:80:7d:6d:11:37:c7:2c:b7:ba:
d6:47:a0:30:53:2a:f4:7b:86:b2:2f:90:ec:14:d1:87:2d:cc:
1d:21:d1:6e:ad:c2:a8:00:c5:6f:d2:db:34:b4:95:14:86:b6:
8e:1b:8b:78:2e:ee:db:d5:4e:a6:78:f0:31:9c:02:b6:79:cb:
9e:a7:18:aa:19:2b:20:7f:26:3d:ee:a1:08:23:c6:9f:41:1b:
0c:a9:5a:6f:df:5a:1f:4c:5a:f7:c3:9d:92:28:29:f8:db:b3:
1f:c5:07:68:ed:20:ea:6f:f1:53:cd:93:8f:7b:e3:d1:97:a9:
bc:4f:b0:7d:b0:14:35:11:11:c8:65:8d:6f:da:87:ce:84:79:
e7:5b:4e:30:20:fe:35:f2:b0:d9:61:81:5c:15:1b:bd:f5:c4:
24:5d:ee:78:ae:bb:53:82:1c:64:cb:ec:2d:67:54:17:68:24:
e5:e3:21:51:fb:f9:43:0b:1a:24:f6:e8:81:5c:8a:9d:dd:a5:
37:14:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:13:53 2024 by rpki-client on console-ams.rpki-client.org