Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.cer (raw, json)
Hash identifier: LSdCel3phIUKftgU/ubxhPP+TE8q7TZpw6qkhlMgO7E=
Subject key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4619
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Apr 2024 17:12:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.54.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17945 (0x4619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 30 17:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:9e:5a:d7:1c:dc:ce:eb:fa:f4:22:48:d7:
94:3d:cb:65:12:83:09:c8:e9:55:a5:82:4e:49:c2:
28:e6:6a:97:b0:69:dc:c1:77:80:cc:3f:fd:fb:14:
c2:d6:25:37:9b:00:3f:3b:f7:f9:8c:ce:cd:10:29:
5f:2f:19:31:2c:f7:a9:6a:ac:d3:2f:1d:13:51:f2:
b7:41:d0:c9:8a:f7:23:3d:f0:85:df:3c:c3:c3:06:
09:19:c7:97:02:e3:3e:08:90:9b:0d:0f:ea:6c:62:
72:0b:37:9f:b7:74:03:3c:65:49:b8:3b:8a:f3:30:
a5:67:3d:cc:59:82:3e:4f:79:10:50:5a:ae:ad:52:
23:47:2e:76:eb:60:49:9e:4e:94:84:81:48:02:68:
61:8a:23:9e:74:19:b2:cd:2e:77:f0:d3:9a:ba:03:
67:2c:8b:a2:8d:e0:47:c8:c2:e7:e4:da:57:f7:0f:
72:a8:b6:7f:fa:aa:ca:f1:c0:e6:b8:61:ae:93:85:
99:6f:a2:6e:b5:10:40:53:ae:4a:47:41:45:61:1e:
35:8a:80:11:7b:99:bc:1c:92:e1:3b:82:3a:ab:a5:
bc:43:75:c4:27:0c:9d:3a:c8:5a:68:9a:70:fe:fb:
3f:12:7a:c7:76:3d:57:78:57:0a:27:7b:9b:db:b1:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.54.88.0/22
Signature Algorithm: sha256WithRSAEncryption
be:52:50:ef:7b:47:40:30:68:c3:e5:13:f6:c2:48:13:1c:cd:
fd:53:e0:6c:ba:c5:b1:f8:0d:2c:cd:b9:2e:ba:62:88:de:32:
c5:df:ec:d7:da:28:e2:de:de:af:41:f5:bb:06:6e:d7:28:8a:
54:89:31:31:54:23:30:fe:be:9d:d5:e6:cf:41:d2:52:c0:72:
c4:4d:81:d1:fc:51:38:5d:1f:b3:36:0c:61:cf:24:76:99:0d:
da:94:9f:a5:3b:8b:a0:63:93:4c:30:29:16:21:02:ff:5d:ce:
80:de:e3:aa:82:cc:a7:91:ce:47:d6:4d:8c:72:9c:d9:ed:af:
1f:3a:04:7e:a1:2d:17:07:0d:b0:bb:d9:4b:85:ce:fe:9f:90:
f0:04:66:ba:5d:5c:1d:ee:7e:84:e8:1e:f3:1c:6e:1d:cd:6d:
7f:4e:49:04:24:c2:4c:15:8e:51:29:e5:cd:3b:aa:68:f7:01:
5b:1a:89:8c:dd:68:b6:91:1f:33:96:48:7a:7c:93:25:8e:0d:
5a:b2:71:51:b0:f5:8f:bb:fa:a8:c3:28:a7:8b:e9:58:ab:ce:
87:6f:cc:f0:c8:23:71:92:67:64:ca:e0:1a:1e:40:f2:eb:f7:
dc:20:2a:55:97:f1:f5:64:4c:4f:42:7c:7d:24:c4:e6:6a:18:
d6:fe:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:47:49 2024 by rpki-client on console-ams.rpki-client.org