Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.cer (raw, json)
Hash identifier: QWZzmtYThYor/wz0mhpAHslk0hiHR3twemxj06xRTBA=
Subject key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4891
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Oct 2024 15:29:25 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 91.208.208.0/24
IP: 91.208.228.0/24
IP: 91.208.230.0/24
IP: 91.208.233.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18577 (0x4891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 13 15:29:25 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:93:e4:82:41:e9:95:2c:5c:68:fb:48:d4:
d0:a2:e5:67:87:dd:25:93:16:40:ac:ee:5f:cd:bb:
13:d4:d6:2a:7d:28:8d:a2:61:d7:8c:0e:f6:6c:5d:
f3:61:6d:c2:97:5a:e4:59:54:aa:27:64:c2:ed:23:
2c:7e:bf:75:c2:b5:be:a2:8c:1f:f3:cb:a2:5a:8c:
db:5a:d2:08:6c:53:1c:da:a2:1a:be:6d:16:37:04:
bf:f7:42:bf:04:f8:fa:4b:09:56:7b:22:4e:a9:85:
8f:51:e2:ba:9d:6a:36:52:58:ed:7b:5f:96:b5:41:
60:a8:f3:2f:7b:94:d5:f2:01:0c:16:a5:c0:fd:6d:
2c:3e:23:1a:e3:c4:87:5a:2a:b5:75:5f:71:9e:0b:
73:26:22:30:ad:0f:ba:99:da:f5:71:70:1a:98:17:
47:70:55:28:d6:5f:20:44:92:a8:78:7e:db:7c:1c:
f0:2c:01:27:4d:bb:3e:28:d3:00:91:72:c6:75:50:
75:63:ad:fd:ca:a3:57:3e:cc:b2:4f:b9:47:9e:15:
da:db:eb:16:a3:3c:e1:98:2b:c6:57:38:64:66:87:
8a:58:7e:3f:9a:f9:f7:ad:a5:c8:a2:b5:be:38:56:
b8:3e:9d:39:e1:78:55:fc:8e:be:da:d7:34:6a:09:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
91.208.208.0/24
91.208.228.0/24
91.208.230.0/24
91.208.233.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6a:d9:ff:f9:15:3d:95:c7:7e:77:58:3f:3d:a5:05:ae:31:
cc:62:32:82:f0:d0:5b:00:aa:fa:00:7d:61:37:32:4e:a8:67:
4e:98:9c:af:f8:f5:57:a2:c8:22:01:da:4d:a6:26:1f:2a:eb:
c6:8d:82:ef:15:ad:a0:e3:c5:4b:ce:f3:f0:a3:f9:1c:25:36:
99:e0:5b:94:e3:fc:0c:97:ec:df:91:33:2e:af:46:cd:4e:27:
16:0c:38:d6:bc:a8:ac:ca:7f:ea:6c:9a:8e:5a:3a:c3:2e:0f:
b4:91:ae:b4:97:58:20:cd:7a:0e:28:fc:47:15:6e:fa:e2:b7:
69:d6:76:5e:bf:39:20:85:c8:53:41:91:dc:39:98:e3:8d:8f:
29:44:47:22:7f:84:46:be:6e:c4:39:e3:c6:c4:0c:88:4a:23:
ab:25:a6:e3:52:9a:32:f7:d7:c2:1a:cb:c1:8d:76:b2:33:46:
ed:10:a3:9c:ac:2e:e3:e7:ae:42:e8:78:b7:d9:37:67:0d:2b:
08:4f:84:13:10:71:41:b1:45:ab:d7:7d:e0:46:2c:a7:07:2f:
55:14:95:77:1c:d9:56:62:54:67:00:d9:f5:f2:a7:a5:ce:9b:
49:96:a5:1d:6a:49:3a:5b:74:90:d7:37:20:3a:d1:d3:99:5a:
97:42:2b:a1
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICSJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjQxMDEzMTUyOTI1WhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5QzQ3RTExMC8GA1UEBRMoRTc5RTlCNTIxMjYzN0UzM0NBNURDQjYx
NzY5MDlDRTE5NjIxQkE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL68k+SCQemVLFxo+0jU0KLlZ4fdJZMWQKzuX827E9TWKn0ojaJh14wO9mxd82Ft
wpda5FlUqidkwu0jLH6/dcK1vqKMH/PLolqM21rSCGxTHNqiGr5tFjcEv/dCvwT4
+ksJVnsiTqmFj1Hiup1qNlJY7XtflrVBYKjzL3uU1fIBDBalwP1tLD4jGuPEh1oq
tXVfcZ4LcyYiMK0Pupna9XFwGpgXR3BVKNZfIESSqHh+23wc8CwBJ027PijTAJFy
xnVQdWOt/cqjVz7Msk+5R54V2tvrFqM84Zgrxlc4ZGaHilh+P5r5962lyKK1vjhW
uD6dOeF4VfyOvtrXNGoJJQkCAwEAAaOCAwUwggMBMB0GA1UdDgQWBBTnnptSEmN+
M8pdy2F2kJzhliG6ZDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM0N0UvMUU3NTM2NTA1OTRFMTFFQ0EwNjI5MjU2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDNDdFLzFFNzUzNjUwNTk0RTExRUNBMDYyOTI1NkM0RjlBRTAyLzU1NmJVaEpq
ZmpQS1hjdGhkcENjNFpZaHVtUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQiMCAw
HgQCAAEwGAMEAFvQ0AMEAFvQ5AMEAFvQ5gMEAFvQ6TANBgkqhkiG9w0BAQsFAAOC
AQEAdWrZ//kVPZXHfndYPz2lBa4xzGIygvDQWwCq+gB9YTcyTqhnTpicr/j1V6LI
IgHaTaYmHyrrxo2C7xWtoOPFS87z8KP5HCU2meBblOP8DJfs35EzLq9GzU4nFgw4
1ryorMp/6myajlo6wy4PtJGutJdYIM16Dij8RxVu+uK3adZ2Xr85IIXIU0GR3DmY
442PKURHIn+ERr5uxDnjxsQMiEojqyWm41KaMvfXwhrLwY12sjNG7RCjnKwu4+eu
Quh4t9k3Zw0rCE+EExBxQbFFq9d94EYspwcvVRSVdxzZVmJUZwDZ9fKnpc6bSZal
HWpJOlt0kNc3IDrR05lal0IroQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:41 2024 by rpki-client on console-ams.rpki-client.org