Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
File: JfPSFoirk4Gqi5UrziZBKTVCp_I.cer (raw, json)
Hash identifier: cjIvv5AwA0nrPY0CdJ0MOZHvep94RMMpZde2+0qFy3M=
Subject key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 40A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Apr 2023 06:45:05 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 51.162.0.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16546 (0x40a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 22 06:45:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:41:3e:ed:9a:98:39:f0:d4:9e:cb:63:39:
48:19:1e:d5:5a:6f:4e:41:b3:3d:03:94:22:2f:63:
b7:ce:a5:74:68:f4:ce:12:ff:8f:73:f6:e6:09:3f:
38:28:94:bc:57:a9:0b:10:ba:92:50:9e:16:4a:d6:
0f:a3:47:80:ff:b1:fe:e1:46:d5:73:da:2a:17:5f:
83:96:af:39:f9:aa:dc:c9:6c:97:92:d8:fa:a4:d1:
a3:f9:2d:47:49:91:1c:8e:ee:48:bf:ed:c2:75:6d:
53:c8:db:b9:2b:3d:70:1a:eb:ce:e2:63:88:f0:f3:
ec:ba:62:5f:ed:5d:3f:68:1b:df:5e:bd:bc:9e:be:
46:27:af:f3:72:bd:4c:78:32:2a:69:d2:02:87:d0:
63:3b:d6:47:e3:7d:11:ab:13:7d:7e:5e:0b:6a:0a:
6d:e8:b9:f0:65:f9:fd:22:6c:ff:5d:1b:d6:eb:f7:
ec:48:26:c8:05:02:17:91:14:d7:7e:2b:be:2d:65:
ff:82:c0:b2:cf:44:24:20:42:45:a5:c7:2d:5a:98:
c2:a7:73:23:58:ab:ef:2f:3c:d7:de:48:5a:f4:01:
21:4d:8e:6e:9e:b1:b7:e7:bb:c1:8b:6c:ec:c6:5b:
53:d5:6f:40:62:87:b7:19:3e:59:88:6e:40:6e:99:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
51.162.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a0:75:c3:c2:5f:cf:f1:1a:62:21:00:3b:96:2f:fa:da:44:19:
94:85:e1:fe:90:b2:38:f0:1e:5a:6a:d7:7c:bb:92:64:7a:35:
99:cc:f6:11:52:52:bf:5c:cb:65:17:e8:22:73:7d:46:0c:ed:
4f:7f:54:5e:7f:b6:98:f6:e4:c3:d9:91:04:64:90:12:e0:72:
e6:79:0d:2d:71:23:4b:e3:19:cf:b8:c2:ed:8f:09:5a:ce:5c:
ae:37:fd:4a:bf:14:60:8f:c1:66:40:f4:6a:42:50:35:cb:ca:
57:e4:48:90:c9:f8:a7:aa:6f:e1:2e:98:f5:69:ee:ed:48:8a:
45:06:4d:61:3f:f5:1e:92:5a:07:89:39:2c:59:c9:a8:3e:06:
16:a0:de:f4:fd:0e:2b:f0:7f:cf:ad:fa:2c:ec:fb:e6:d6:3a:
77:1b:a0:bf:82:4e:35:5e:90:00:d1:b0:91:be:2a:69:ba:c5:
4b:27:e0:7b:c4:73:d7:c8:4b:01:4d:5d:0b:5e:b9:79:b7:34:
e0:90:c6:60:43:55:80:ea:19:ed:da:aa:22:1a:16:56:6f:f4:
d1:07:71:7c:e3:d9:5a:79:f8:0c:c9:c2:d1:e0:de:ea:64:ae:
72:c8:5b:78:84:ed:51:2b:1b:97:40:8d:f7:f4:bd:6f:a6:a1:
77:b2:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:20:27 2024 by rpki-client on console-ams.rpki-client.org