Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer (raw, json)
Hash identifier: yYvHQe88xYNt+6YTpdu0JaEK1haRtF4u6sBW+2Xwe3M=
Subject key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5B6B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Sep 2024 08:46:32 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.47.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23403 (0x5b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 26 08:46:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:5d:bc:4a:e4:eb:19:53:47:d5:c8:a3:55:
49:21:47:7e:c0:5a:dd:bf:85:31:0e:33:ec:4c:95:
98:07:4a:10:1b:89:4b:c3:bd:58:b3:d4:43:65:3f:
24:87:69:a4:9d:43:b7:13:09:f6:4a:0a:87:55:f5:
19:3c:d0:cb:66:51:77:40:eb:60:e3:ff:0a:a9:68:
95:a2:91:0b:b4:af:52:2d:d9:24:db:6d:63:ac:cf:
4e:df:8b:15:91:3d:ae:a4:47:5a:77:01:74:64:5e:
ec:f8:6e:6c:20:20:90:6f:70:50:45:cf:f8:1d:ad:
ad:9a:9b:76:d3:1e:59:0a:4d:9f:3a:c6:58:27:06:
73:54:23:63:91:32:bc:e8:0c:66:00:7c:2a:b8:22:
47:61:f4:47:7a:33:09:a2:0b:16:aa:69:fe:61:ca:
62:9a:b0:4a:ab:0e:dc:02:72:11:52:52:a3:96:b9:
5b:61:e8:b6:34:26:a0:4a:37:43:94:00:9b:93:98:
a8:f0:84:05:a1:10:e2:38:3e:1d:49:62:cc:7d:30:
c8:1a:1d:95:3e:d0:b3:db:79:51:4f:a2:73:b1:ec:
01:68:e7:c7:39:c6:92:f6:c3:6c:e0:15:14:8c:aa:
2a:f2:57:0f:c0:4f:d0:44:97:6a:ed:ac:d7:30:20:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.47.0/24
Signature Algorithm: sha256WithRSAEncryption
82:80:b2:71:e4:e8:ec:a4:8f:66:f0:46:08:51:d6:1d:3f:b2:
13:73:bf:15:1f:fe:93:59:b5:ae:ed:d5:16:e6:ef:25:62:80:
24:55:ef:75:ba:58:fa:b8:ff:44:a2:51:92:8a:93:42:4b:9c:
87:c4:e3:c2:56:88:d8:f8:3e:4d:20:e1:a9:46:f8:c4:30:69:
34:a0:93:a0:24:7b:87:1d:40:c7:1d:a3:f7:83:2f:78:b1:08:
f8:5c:49:5a:28:86:14:f5:56:71:39:01:30:2a:81:35:00:f8:
b0:4c:6f:c8:6e:4e:a9:be:11:24:f4:dc:40:ab:18:7e:0d:82:
01:45:0b:df:a5:98:bd:56:dd:4c:09:0e:58:ce:8b:a3:b0:04:
f8:5d:a4:b8:a0:2c:09:c5:28:b7:3f:26:35:c5:c3:1b:2d:42:
67:5f:ef:79:39:e2:15:f8:9f:b5:0c:b5:84:eb:c1:79:f0:fa:
03:95:31:d2:7b:20:4d:d4:56:9f:69:f1:b6:08:0f:c2:e2:18:
69:09:42:7e:35:39:3f:b3:eb:0b:d3:97:4a:76:5b:9f:c6:44:
5b:96:44:60:47:d2:21:9b:d5:d9:42:ae:8a:2e:a3:b3:ab:02:
09:6b:24:65:20:38:32:be:dc:64:4e:94:30:23:70:4a:d0:64:
84:a4:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:17 2024 by rpki-client on console-fra.rpki-client.org