Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer (raw, json)
Hash identifier: WaQz7MIHHsMNP94ERvq2lLpkaNvTpcbzPNKGLSWPUek=
Subject key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ADC8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Jul 2023 14:01:09 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 2402:4680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110024 (0x1adc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 14:01:09 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:23:8d:5d:6b:c7:d8:10:1d:fc:c5:02:89:
17:99:22:a0:12:3b:5b:b3:44:92:93:92:dc:70:ac:
3e:23:1c:c6:9c:b2:63:54:10:13:62:34:25:5e:7f:
d4:71:22:af:4f:cf:cd:2c:36:4f:6d:cc:56:a0:18:
cd:a4:99:47:15:56:7f:e6:40:a7:68:91:57:ee:41:
17:b8:47:e8:0a:4e:52:3a:1a:ca:91:4d:ca:3d:3a:
51:16:4e:d3:7b:95:03:90:dd:5a:a2:b8:51:a4:54:
2e:1b:ad:9d:c8:e2:8b:a9:01:64:41:38:1d:61:35:
43:ae:43:3c:ff:5d:46:83:10:6d:03:70:1e:16:1f:
08:f1:69:54:eb:a8:de:c2:3f:52:d0:8a:68:4d:4f:
58:37:7e:0a:fe:d8:5b:b9:02:58:94:8b:fd:e0:a8:
88:b8:79:96:f1:e3:c3:f2:19:4d:a7:e6:c5:56:46:
4c:9b:a9:cf:ea:d8:d1:c9:92:6d:e7:58:1c:dd:fb:
67:ee:9c:87:a0:49:cb:7e:03:9c:c2:19:21:7b:95:
fa:a8:af:c6:c7:3a:fb:05:6b:e5:11:a2:9f:11:3d:
d5:07:c6:8a:ee:c6:e1:ff:b8:b1:79:f2:eb:bd:85:
50:57:20:01:f7:c8:c1:6a:4c:38:4f:f7:3e:a5:1e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4680::/32
Signature Algorithm: sha256WithRSAEncryption
c6:70:ad:94:74:1f:0f:d4:ac:26:3f:39:52:30:32:8c:d3:47:
7e:9b:37:9e:64:73:20:36:02:3f:c0:ab:fb:b0:1e:37:b6:e9:
5e:93:36:a1:02:d7:e7:29:3d:8c:b4:7e:bd:fe:10:e5:da:06:
fd:81:26:ef:6d:2e:60:de:eb:90:8f:91:a7:39:31:38:bc:e7:
55:1e:01:65:2d:07:9f:6f:a3:86:97:3b:aa:a9:7d:88:77:69:
b6:2b:3e:5a:02:1d:3b:5b:89:cb:e0:bb:69:f6:3f:e5:65:c5:
ae:68:5a:29:8f:6a:c5:e5:52:e9:91:ee:a1:20:e8:a2:70:ec:
91:7d:a5:24:66:d4:e8:ea:62:b9:fc:d9:d7:9e:86:50:44:42:
ea:66:91:54:48:94:92:12:7a:8a:b8:19:3e:5b:0f:4c:33:90:
58:84:81:8e:fa:a3:7e:62:78:22:82:7c:f7:4c:87:32:ea:4b:
04:c4:30:4d:96:1e:1f:37:f8:c4:6e:60:05:70:cc:d5:e6:73:
4c:d4:37:00:c6:66:97:7d:68:73:fa:c1:e1:14:59:e7:9d:3f:
9f:c4:38:87:5b:71:71:21:26:ff:14:2f:1c:d9:f5:d4:70:db:
94:1e:91:66:30:63:b0:a3:d3:1e:fe:ec:e5:f9:7b:e1:75:77:
74:14:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:52 2024 by rpki-client on console-ams.rpki-client.org