Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
File: uzvV1-GZJNhitqQb80x_27vpHG0.cer (raw, json)
Hash identifier: rfY/1h/FaM6c0dQIgoGD9u0JagAckiLc8Uq+NEGs+oQ=
Subject key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5C03
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Oct 2024 06:29:24 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.124.12.0/22
IP: 160.25.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23555 (0x5c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 9 06:29:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:a9:ef:35:b2:2c:b3:5b:10:a1:43:6e:b1:
61:7c:2a:2d:ff:e5:9f:ba:dd:21:4c:a5:a2:f8:57:
d2:0d:f6:37:b3:e5:39:f6:01:84:23:56:81:43:30:
53:28:09:55:d0:49:8b:97:9a:14:d0:ef:ac:a5:83:
1a:08:89:bd:46:c2:60:95:44:2e:df:e7:c0:46:29:
e3:96:ca:46:ad:97:ae:c8:3e:d8:f1:d7:99:a5:00:
a9:82:28:9d:cf:d0:6f:a7:92:8b:34:38:48:f8:28:
9d:4c:ab:fb:4c:cd:1a:de:e7:b6:4a:e5:90:0b:af:
11:aa:0a:dc:b3:f9:3c:b3:bf:f4:07:06:3e:8b:92:
5d:6c:9c:09:1b:d2:03:ad:3c:87:f2:11:c5:ff:94:
ce:3f:78:68:39:6f:5e:e1:8e:52:37:dd:d7:67:aa:
d2:20:7c:aa:d2:b1:96:1d:3d:c1:bd:34:1f:1b:07:
47:be:02:72:2a:27:46:1f:01:36:75:71:0a:ef:09:
fa:9e:aa:dc:ff:ef:7b:7b:b3:c4:20:de:42:ec:56:
5d:0d:01:ed:4f:2d:8b:9d:40:98:d3:7d:36:3f:a1:
62:2d:25:f1:3b:a9:c8:f1:b8:73:3a:cf:fa:64:13:
be:3d:58:be:8c:6c:44:de:3e:72:d0:ea:9a:5b:a8:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.124.12.0/22
160.25.254.0/23
Signature Algorithm: sha256WithRSAEncryption
42:6f:f3:bc:6f:9a:3a:58:2b:04:1a:9f:9f:85:eb:aa:df:8e:
b9:78:93:1c:6b:90:0f:b4:ae:20:c4:25:a8:ed:bb:ea:3d:ca:
da:c3:54:c0:84:e8:f8:71:12:60:ee:14:c9:c8:76:23:df:98:
bf:db:1a:3b:da:fb:59:19:be:09:b8:87:95:4f:1b:d2:8a:d8:
37:d4:10:c9:76:12:79:00:49:26:ba:3b:95:fe:15:9d:d5:36:
00:5d:ac:f2:fd:54:68:66:77:77:7a:7a:e2:01:bd:e5:ca:58:
88:d0:46:81:7a:3a:44:50:bf:86:c4:03:a9:cc:21:1f:f7:2d:
48:60:95:5b:f8:9e:24:d9:68:82:2a:b4:41:ea:ba:b4:04:11:
1e:e2:de:98:8b:1f:75:3d:3d:28:2b:14:fd:67:d2:96:2d:13:
1b:98:94:d3:42:43:0b:86:e3:85:33:a8:c1:6a:f8:97:ca:c4:
cf:c7:5e:76:41:36:1d:77:17:7e:8d:95:24:a2:28:87:3a:e2:
9d:00:e2:02:41:e6:6b:2d:13:8e:4d:c6:59:65:60:fe:6e:ba:
ef:5a:9b:0e:12:35:77:a6:f6:78:43:1d:5d:6b:fc:fd:d5:4e:
b4:45:dd:74:dc:c4:b2:e1:a3:49:48:ba:c6:ce:4e:3e:33:97:
0a:43:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:01 2024 by rpki-client on console-ams.rpki-client.org