Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.cer (raw, json)
Hash identifier: h/clWdXtAqtDQ2JGcGywnCVfvlMBP/ieyDRYeTu6dTw=
Subject key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4300
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Oct 2023 19:43:02 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 91.208.208.0/24
IP: 91.208.228.0/24
IP: 91.208.230.0/24
IP: 91.208.233.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17152 (0x4300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 1 19:43:02 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:93:e4:82:41:e9:95:2c:5c:68:fb:48:d4:
d0:a2:e5:67:87:dd:25:93:16:40:ac:ee:5f:cd:bb:
13:d4:d6:2a:7d:28:8d:a2:61:d7:8c:0e:f6:6c:5d:
f3:61:6d:c2:97:5a:e4:59:54:aa:27:64:c2:ed:23:
2c:7e:bf:75:c2:b5:be:a2:8c:1f:f3:cb:a2:5a:8c:
db:5a:d2:08:6c:53:1c:da:a2:1a:be:6d:16:37:04:
bf:f7:42:bf:04:f8:fa:4b:09:56:7b:22:4e:a9:85:
8f:51:e2:ba:9d:6a:36:52:58:ed:7b:5f:96:b5:41:
60:a8:f3:2f:7b:94:d5:f2:01:0c:16:a5:c0:fd:6d:
2c:3e:23:1a:e3:c4:87:5a:2a:b5:75:5f:71:9e:0b:
73:26:22:30:ad:0f:ba:99:da:f5:71:70:1a:98:17:
47:70:55:28:d6:5f:20:44:92:a8:78:7e:db:7c:1c:
f0:2c:01:27:4d:bb:3e:28:d3:00:91:72:c6:75:50:
75:63:ad:fd:ca:a3:57:3e:cc:b2:4f:b9:47:9e:15:
da:db:eb:16:a3:3c:e1:98:2b:c6:57:38:64:66:87:
8a:58:7e:3f:9a:f9:f7:ad:a5:c8:a2:b5:be:38:56:
b8:3e:9d:39:e1:78:55:fc:8e:be:da:d7:34:6a:09:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
91.208.208.0/24
91.208.228.0/24
91.208.230.0/24
91.208.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b0:ab:90:37:d2:c9:62:4d:40:da:fa:2c:70:44:0a:37:ba:
97:64:62:74:ac:70:07:01:88:89:ee:bc:e6:d0:3d:15:9b:01:
e9:6a:7d:7b:4c:ba:17:2c:4f:64:72:76:ea:01:40:c0:9f:1a:
50:0e:3a:db:b9:ba:16:e8:40:f0:72:9f:ab:2e:c0:11:f9:54:
a4:9b:25:22:28:5b:4e:a6:ac:cd:87:b4:e7:0d:f7:94:dd:fd:
2b:05:98:65:87:bb:b8:f1:95:9b:a9:6a:b0:22:7e:d3:55:84:
ac:d3:1b:ba:cc:16:ea:16:0a:ee:22:35:14:f7:32:04:8c:45:
38:51:5b:98:e3:83:ca:39:c1:e8:2c:c7:0e:70:ec:4a:19:2e:
a9:4f:05:27:ad:9b:77:b0:9c:d5:2d:dd:87:ea:76:01:a9:ca:
55:b2:29:6d:ed:f9:8f:ef:72:ee:4a:98:06:32:82:b8:44:24:
d5:ef:04:8e:6c:f5:cd:b8:03:1d:01:0f:4c:3e:96:8c:40:45:
c6:a1:8f:ed:e9:ae:a5:cd:33:9d:70:04:67:d2:29:f5:2c:9b:
01:54:35:6c:08:be:5a:98:2f:29:e9:94:7d:35:7e:58:bc:5c:
72:4d:70:dc:ad:d1:d8:ae:5e:3e:5a:b1:34:ac:2c:12:b0:9b:
a8:9a:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:47:49 2024 by rpki-client on console-ams.rpki-client.org