Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
File: v_WBURjDvN2NWsIxfbvPo5l-NfY.cer (raw, json)
Hash identifier: izruGmmAd7B688FdCx+F2YpbmvKVy7MZ0qLoeRNhyK4=
Subject key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 532C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 10 Mar 2024 02:49:58 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21292 (0x532c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 10 02:49:58 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:04:95:c9:9b:ab:fb:0c:dd:96:4a:cf:07:
14:f3:8d:06:ff:39:49:d7:77:de:14:da:57:9e:42:
23:ef:f0:9e:af:7b:70:70:b2:4a:e2:25:a7:be:5e:
2c:2f:78:a0:7f:a5:3e:38:51:43:da:67:74:01:7b:
fc:35:b1:ab:6f:f6:10:e1:0d:19:64:8a:87:07:71:
7a:ac:bd:01:2a:0c:ba:c7:a1:51:cb:16:af:81:ab:
2f:a7:35:f7:fb:f4:55:fc:d9:b4:c8:38:c0:e3:b3:
2f:59:45:cf:75:e6:90:45:bb:2d:14:d1:a8:0e:9a:
72:4e:3c:51:74:36:df:ae:4b:6e:ff:de:e1:f6:bc:
b4:2b:f3:b9:0d:71:16:81:36:83:59:4d:5a:46:78:
40:9f:7e:75:17:e1:92:1d:86:00:fa:0f:ab:31:db:
28:44:5a:7c:7a:f9:a4:11:53:af:82:1f:ec:58:d6:
e8:a8:74:76:ff:a3:7b:5a:91:7a:c2:0d:bb:40:87:
a8:a6:3b:d3:1b:4c:5b:7b:c6:83:e6:7c:9b:19:51:
d1:6e:72:e7:54:da:b6:74:f4:dc:96:8f:68:80:c3:
d0:8e:1c:82:0a:f6:16:27:5c:1a:0d:27:77:c4:30:
aa:9a:71:e7:4b:ac:2e:90:dc:57:10:3a:19:23:ac:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.178.0/23
Signature Algorithm: sha256WithRSAEncryption
04:86:b9:a8:30:d9:7e:e6:e5:f1:b6:62:cb:fa:9f:c0:6b:4a:
0d:4a:b8:f6:63:60:4a:0c:7e:6a:38:ea:78:c6:19:52:5f:a6:
da:5d:f0:95:d4:ad:41:ac:9a:45:3b:fe:af:b9:3b:46:bd:90:
8c:98:7f:63:52:c2:a4:0c:e6:4b:da:06:9e:dc:8b:f9:f9:af:
83:a8:38:9d:18:b0:b1:08:4a:5a:38:bd:44:a1:3c:7e:72:20:
0e:9c:7f:ca:4e:a8:9a:29:31:a0:c9:86:74:e1:db:2b:91:c1:
7c:0b:d7:2a:70:8f:33:d2:7a:66:d0:8a:cd:f1:c6:7f:87:7d:
a6:81:5e:1e:cc:f1:c8:58:85:33:df:07:ab:11:1e:eb:08:66:
dd:37:8d:1b:a3:45:43:8f:c9:b0:9e:ae:64:90:67:fd:3a:c4:
73:4a:8a:2b:8f:6a:c6:61:b5:2a:89:db:27:fb:20:59:0d:05:
64:06:e3:41:e6:7c:cb:63:77:36:17:3c:fa:b5:44:d4:3a:60:
1a:7c:7e:01:5a:fd:a1:93:cc:bf:98:6b:21:3b:59:43:9b:00:
3c:e9:c3:46:26:ae:85:95:ad:9d:b7:c2:2b:3c:00:f7:f3:30:
be:d8:30:92:a5:c6:5c:65:e8:96:ef:1e:e4:66:ae:af:5c:8a:
43:d8:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:10 2024 by rpki-client on console-fra.rpki-client.org