Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
File: wm9G_ZlSs686fXFd4b86YeJceYo.cer (raw, json)
Hash identifier: BkzdJRsadnswh4NKfYju6wJilp848JklCZ4twocGWSM=
Subject key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5756
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Jun 2024 09:14:36 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.25.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22358 (0x5756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 27 09:14:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:ce:d9:70:4b:f8:83:49:cb:99:42:59:1a:
9c:69:40:75:42:57:b9:db:bc:8b:94:6e:d8:cc:6e:
f4:04:3c:16:cf:6a:d4:31:51:09:bc:45:6e:54:4f:
8f:3c:9b:af:8b:8a:9f:7f:b1:0f:32:11:eb:b4:54:
dd:79:b3:91:cf:50:e0:79:21:fd:fc:45:c4:e5:e4:
a6:80:43:b9:32:60:25:38:be:bf:91:a7:23:32:25:
de:29:b6:a0:9e:50:28:85:47:bc:c7:62:88:7f:d2:
c8:42:f4:13:92:a5:39:2e:87:80:b5:97:39:42:0f:
c1:a7:03:2e:12:fe:cd:c9:b8:31:c5:d1:9b:b6:4d:
ad:3b:40:23:16:4e:0b:1e:e3:86:29:33:7f:70:18:
29:1b:32:62:d2:f5:85:b3:1b:9e:c2:3b:04:d1:00:
95:f5:83:1a:01:7d:fb:98:80:b2:80:33:54:1e:42:
ce:8f:16:c1:b7:3d:51:87:33:58:d9:53:83:09:02:
e9:2a:ab:f9:15:2d:8c:25:45:69:52:f2:bb:b0:02:
f6:9b:ac:17:67:52:15:03:e7:c5:94:45:53:ae:ec:
45:fa:cc:af:f0:d1:ee:ea:75:6e:8a:1f:74:bb:85:
98:fe:d3:e7:a2:f2:94:a5:34:b8:15:aa:03:f9:55:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c4:54:88:06:fa:35:27:17:d4:94:72:eb:0f:ae:59:ca:fa:
37:fd:c7:8d:a5:bd:65:81:f2:84:39:7c:2a:fe:67:ae:3a:69:
02:07:a9:c4:f2:d8:8f:a8:63:3b:7e:28:72:b0:10:4a:5f:2d:
cd:be:0d:08:b0:ea:1c:e6:0d:5c:29:90:40:6e:b6:ff:d9:e9:
85:43:0a:52:86:95:c7:b7:b9:8b:c9:f2:c1:f3:08:7f:5e:dd:
8c:e4:c8:50:5f:95:34:4d:96:37:59:bb:1b:5c:11:c2:81:1d:
7c:05:b0:28:a1:48:dd:3e:12:c3:9f:1d:fc:17:da:7d:cb:9e:
00:73:2d:b1:75:62:59:90:2e:11:73:54:88:1c:80:83:fc:9b:
09:6e:24:3a:23:ce:7b:61:55:44:7e:1f:1f:7c:5d:b1:85:bf:
da:fd:b6:4c:31:07:bb:f7:ac:36:4b:40:b0:ad:bf:ec:c3:8e:
9e:b7:66:88:2c:db:c7:b5:da:0d:49:24:72:2d:7b:1a:6d:59:
8b:4a:47:eb:8c:97:cf:fd:17:d6:ec:d7:0e:f1:97:25:fe:89:
2d:44:89:34:87:e8:04:ba:02:f5:19:14:b8:68:9e:5f:28:3b:
6e:cc:f4:8b:b4:91:57:7d:ba:53:c3:18:0d:ee:69:78:cc:5a:
ee:e2:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:17 2024 by rpki-client on console-fra.rpki-client.org