Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer (raw, json)
Hash identifier: xkXRbyxWvNnyv3i4Wejt1xO/43EDP1q7G0gyU4OSb1A=
Subject key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4565
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Mar 2024 21:57:01 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 80.249.0.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17765 (0x4565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 11 21:57:01 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:16:60:3d:0f:82:da:d0:a7:5c:a8:8a:c2:
dc:20:e6:63:3b:14:7f:f8:94:c7:37:84:1a:a8:6c:
53:d1:3d:74:e0:1a:f2:ec:ed:c8:9e:ce:84:39:c2:
29:f9:d4:c8:15:b2:b5:c1:d8:85:68:c5:95:65:1e:
86:e3:5c:98:aa:77:5e:68:da:db:90:ad:47:71:5a:
1a:08:56:9d:c9:00:65:0b:10:65:a2:28:8b:4f:8b:
c5:88:63:8f:0d:67:08:31:26:8b:53:d0:66:80:b5:
c1:36:89:8b:a8:f7:1a:ba:a2:2d:2f:b7:47:dc:66:
53:84:01:2e:11:77:0b:7c:a5:c9:61:e1:c8:2e:98:
7a:c1:a8:9c:cd:3f:e8:30:71:b5:c6:b7:90:2a:d6:
6e:d5:3d:59:5f:b1:2a:79:c2:b5:dd:52:24:83:71:
bf:a2:93:1a:5d:95:57:78:00:50:ff:4b:9e:ed:99:
62:ed:ea:ec:08:66:be:33:b3:ca:88:0f:21:3b:d7:
ab:da:20:37:5e:74:04:76:87:8b:ba:9e:27:07:b9:
9a:9a:b5:6e:7f:d9:bb:d7:ed:3b:bb:f4:9d:c4:dd:
4b:7f:b5:9b:52:f6:d0:34:9b:20:43:42:76:ac:b6:
69:26:ce:71:3c:bf:ac:70:49:4d:49:98:58:66:c0:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.249.0.0/20
Signature Algorithm: sha256WithRSAEncryption
97:d2:4d:9f:f5:95:d5:1f:42:a8:dc:de:98:1a:33:c2:0b:cd:
dd:2c:29:53:e1:0c:50:8e:30:33:f4:6e:51:e5:20:19:c9:b3:
38:13:11:9a:ce:42:c2:15:6d:e0:28:ce:3c:f7:db:65:c2:62:
6a:85:74:bf:df:f9:ea:1b:93:08:8c:41:1e:fe:3b:e3:c0:92:
54:ce:71:88:41:20:e6:ed:30:24:87:2e:5c:b4:3b:63:d4:7c:
b7:a8:05:6a:28:2a:bd:9c:49:03:c6:d9:e7:9f:8c:24:e9:82:
19:d1:7d:8e:c5:95:c0:fe:de:da:dc:fd:53:c5:2c:18:de:8d:
21:6d:74:2a:63:6f:1b:72:fe:e0:1c:d5:20:f5:df:07:3e:68:
c9:a5:30:fb:17:7d:e9:bf:95:5e:03:03:87:59:75:a5:7b:16:
ad:53:04:52:25:6a:2c:2d:ff:cd:50:ca:1f:dc:a6:21:b6:dd:
97:6a:9d:45:3d:69:f3:9b:e3:2c:c5:4a:3d:62:e3:7e:7e:e7:
2a:bd:87:62:f4:cf:a1:e8:d5:a3:17:ab:f9:c4:94:f0:c3:e0:
04:69:84:82:28:32:a2:4c:f3:78:e8:fc:94:f8:5c:84:14:f2:
f7:77:b3:7e:9e:4c:cf:81:7c:be:43:31:8a:06:a0:54:69:5e:
7c:40:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org