Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
File: zuSHZKosFvdaBnJE66WGaXThztY.cer (raw, json)
Hash identifier: hKVXlVtsMAgkLgC8pgRHF9gSc7h8muL5syc2MTyxl0Q=
Subject key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A77
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Sep 2024 13:13:19 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.236.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23159 (0x5a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 13:13:19 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:9d:18:6b:a4:d0:ab:ad:f8:c0:69:58:29:
4c:32:b8:75:6f:75:5e:6b:7f:93:e3:d7:0e:b7:45:
f2:1f:48:8c:3c:fc:ce:4a:94:d3:64:13:28:2d:d9:
7d:a8:07:ac:ef:4f:47:cb:9d:76:ff:00:d5:36:ce:
81:fc:cc:d4:57:9e:9b:e4:0b:18:e9:a4:37:c2:df:
82:aa:41:58:83:18:9b:01:5c:a8:e1:21:98:52:5e:
6c:02:1f:31:47:bc:dd:2e:09:ff:0b:a8:94:d3:45:
ac:da:5b:26:c1:77:f8:d5:80:42:1a:7c:4f:5e:53:
d5:29:02:95:10:79:05:40:08:ce:e9:5a:64:4d:cb:
29:f4:9d:5e:a8:89:d8:61:09:87:82:7b:94:ce:9d:
c0:72:61:97:53:0f:38:fc:81:f1:96:2b:ed:7c:b0:
b4:8a:de:90:b6:d6:6e:d4:33:4e:4d:e3:9b:61:a6:
0c:2d:c1:57:b1:14:3b:9e:a7:f6:f0:79:72:20:67:
75:eb:16:c9:9b:85:81:60:50:00:e9:2a:ab:7e:73:
32:93:ce:3f:7a:17:a1:8c:f0:07:2c:cc:db:3f:31:
43:05:20:55:b2:c8:e3:88:7d:7e:69:36:72:d0:d7:
f0:59:d8:a9:45:ec:32:13:b4:f7:b0:59:a2:69:18:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.236.0/23
Signature Algorithm: sha256WithRSAEncryption
00:be:e8:a6:cd:a9:f4:a8:af:47:e1:b0:2a:53:b9:7c:55:7e:
f6:ea:30:b1:3e:4d:f7:af:b4:e3:48:e0:3f:3f:67:d1:02:38:
34:a4:6b:ed:5a:e6:90:80:a0:77:c2:2c:7b:ca:55:fc:fe:0f:
6c:08:2d:98:df:b3:f4:a2:ce:1b:1e:1d:7b:78:c2:3a:58:ce:
5b:be:ef:0f:f8:a6:d8:34:c5:d9:bb:cd:ac:32:d2:2d:57:02:
4b:0e:2d:31:c0:9c:5f:37:d1:71:aa:2e:4c:44:1b:55:f6:bb:
77:db:b8:17:af:55:36:94:aa:ac:91:a4:df:4b:2d:4b:42:4f:
7b:ea:b4:1d:df:3f:e0:4b:9a:88:ab:44:37:a7:e0:b8:b8:5b:
a8:97:e1:f4:68:ef:ad:1c:47:7c:95:7f:2f:a9:ed:fc:37:15:
ad:e5:2d:d9:aa:19:23:6c:48:fc:29:2d:51:c8:2f:3a:46:d6:
85:a7:19:ca:d8:d4:ed:fa:d6:e3:73:11:d4:ba:5f:57:59:eb:
c1:4f:90:cf:5f:9a:ae:9f:d8:56:a1:a8:3a:36:ac:f7:4f:4f:
ee:9a:6e:fa:85:00:8f:03:5f:7d:6c:fb:eb:9c:6d:b8:eb:b4:
e6:d5:f2:fb:a0:a6:5b:24:3e:34:a4:8e:3b:72:0e:32:d9:38:
f1:01:4a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:02 2024 by rpki-client on console-ams.rpki-client.org