Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
File: 6CbZQgvPRaEIfTATu05KhJYNYcc.cer (raw, json)
Hash identifier: lXdvnDRlYHKbDnwLL+++LSmQcdW76FTFvwrvzgtKQT4=
Subject key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4837
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Sep 2024 15:08:03 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:10::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18487 (0x4837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 20 15:08:03 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:9e:03:24:aa:1b:98:07:dd:fe:4a:61:7b:
5e:cf:5e:97:66:14:20:5e:eb:d3:7d:08:74:69:8a:
bf:c3:f1:2d:77:af:c8:db:0e:53:6a:2b:38:a3:65:
5f:69:88:6a:a2:29:28:bc:6d:94:53:4b:91:7e:b5:
82:28:c6:77:b9:79:cc:d7:e8:e3:e7:ff:ab:8e:9e:
c4:8a:16:eb:f6:54:e7:4d:10:dc:f3:0b:16:94:f5:
35:c5:b0:89:37:4f:af:3b:31:81:ed:3d:1d:27:97:
94:3c:a0:8c:af:56:eb:32:c5:6d:8b:f3:2e:5d:a0:
7b:a2:5b:f1:3c:8c:dd:24:fd:17:a2:af:15:03:21:
c3:a4:bf:af:4f:e3:74:4f:50:37:40:6d:10:a2:5c:
b8:5e:9c:07:88:ea:71:ec:0f:90:7d:c1:c3:ee:23:
8f:af:71:78:a2:c8:4e:f4:aa:9d:6f:3d:99:4e:55:
a4:3e:63:3c:8f:34:83:fe:98:f8:fd:a5:ac:f8:d4:
6e:f3:a1:9a:66:14:22:37:88:fe:75:48:f2:01:57:
f0:06:8e:20:de:eb:7c:40:b4:ba:50:b2:bb:99:2a:
44:52:86:d6:05:04:9f:41:b4:0e:02:b7:47:cb:8b:
a2:e5:3e:0f:c4:d6:1a:ae:12:a6:41:df:9f:33:bf:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:10::/48
Signature Algorithm: sha256WithRSAEncryption
33:37:f1:c9:f6:be:44:22:be:22:80:59:15:3f:10:ea:e6:5d:
e9:90:29:fc:4f:a9:8f:4c:c0:f2:42:7f:20:54:ca:16:1d:3d:
14:22:b8:7c:b2:f9:05:4a:17:ee:81:df:c9:e5:ae:47:f7:9f:
b6:f3:a6:67:49:a8:67:15:4e:ce:52:f7:a1:2d:7c:c8:39:3a:
a4:0b:de:4c:41:92:16:eb:65:25:aa:b1:24:d5:41:ee:47:bb:
1a:31:24:af:36:2e:63:57:59:a8:7a:87:42:a3:a0:2d:02:7a:
91:1b:c4:67:f2:07:43:95:d7:52:ee:39:d6:1e:8b:db:f1:05:
9d:f4:55:7c:01:e1:f3:3b:12:ee:e1:4e:ac:ce:f6:73:ef:3d:
6d:99:64:d9:dc:38:62:a9:05:fa:36:f6:83:80:3c:d6:5f:0b:
0a:d5:f0:b0:c6:18:08:fd:4b:d3:3b:21:65:3b:e6:de:d4:8f:
2a:7f:3b:c9:05:41:c7:58:de:28:27:e2:91:03:39:2e:37:fc:
55:68:20:7a:19:fb:9c:55:94:e5:27:25:91:1b:8e:47:45:63:
d3:ff:55:4a:bc:86:9b:62:59:5b:b4:f4:61:4b:9d:aa:88:a7:
e0:ec:b8:70:3c:31:53:a0:18:c5:a0:ce:29:30:2b:af:12:6a:
fa:24:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:30:15 2024 by rpki-client on console-fra.rpki-client.org