Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
File: 6CbZQgvPRaEIfTATu05KhJYNYcc.cer (raw, json)
Hash identifier: p5dsKW9imPIzExxGpPUN1wJjql7FTVfaBn5eg1Oy+SM=
Subject key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4458
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jan 2024 15:10:16 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:10::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17496 (0x4458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 2 15:10:16 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:9e:03:24:aa:1b:98:07:dd:fe:4a:61:7b:
5e:cf:5e:97:66:14:20:5e:eb:d3:7d:08:74:69:8a:
bf:c3:f1:2d:77:af:c8:db:0e:53:6a:2b:38:a3:65:
5f:69:88:6a:a2:29:28:bc:6d:94:53:4b:91:7e:b5:
82:28:c6:77:b9:79:cc:d7:e8:e3:e7:ff:ab:8e:9e:
c4:8a:16:eb:f6:54:e7:4d:10:dc:f3:0b:16:94:f5:
35:c5:b0:89:37:4f:af:3b:31:81:ed:3d:1d:27:97:
94:3c:a0:8c:af:56:eb:32:c5:6d:8b:f3:2e:5d:a0:
7b:a2:5b:f1:3c:8c:dd:24:fd:17:a2:af:15:03:21:
c3:a4:bf:af:4f:e3:74:4f:50:37:40:6d:10:a2:5c:
b8:5e:9c:07:88:ea:71:ec:0f:90:7d:c1:c3:ee:23:
8f:af:71:78:a2:c8:4e:f4:aa:9d:6f:3d:99:4e:55:
a4:3e:63:3c:8f:34:83:fe:98:f8:fd:a5:ac:f8:d4:
6e:f3:a1:9a:66:14:22:37:88:fe:75:48:f2:01:57:
f0:06:8e:20:de:eb:7c:40:b4:ba:50:b2:bb:99:2a:
44:52:86:d6:05:04:9f:41:b4:0e:02:b7:47:cb:8b:
a2:e5:3e:0f:c4:d6:1a:ae:12:a6:41:df:9f:33:bf:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:10::/48
Signature Algorithm: sha256WithRSAEncryption
11:21:0d:1d:48:0a:f5:1d:17:ca:e2:16:d4:d5:c7:03:05:65:
b9:9e:db:0f:1a:51:66:2c:35:b7:a9:d1:9d:42:89:76:ad:24:
02:bc:26:f5:ee:b1:84:07:da:34:10:5e:23:6f:95:1e:f1:9f:
70:1a:22:32:91:79:0c:d5:58:dd:6c:eb:4c:c0:0f:c6:81:e2:
aa:ec:d4:67:3c:57:45:58:31:a6:ce:a1:8c:44:8d:65:3c:30:
a1:f4:00:cb:03:5c:51:a6:44:c2:06:d9:56:2f:fc:d2:79:68:
96:60:4b:dc:6b:55:3c:e3:0c:fd:93:1d:c0:85:76:ac:da:64:
75:3f:64:7a:ff:56:5c:7d:5a:cb:87:4b:37:1a:36:e5:e3:c7:
51:d8:84:65:b0:e0:42:6c:d4:84:f0:a6:25:33:8a:33:54:00:
88:85:f0:45:90:8a:d2:47:67:aa:e4:e1:82:2f:2b:02:92:8e:
84:31:68:a4:64:17:e6:80:82:66:52:11:06:00:de:35:68:58:
85:80:bf:6b:b5:67:3a:40:3c:8c:c0:58:5c:e0:9b:83:c8:f8:
aa:3c:64:de:07:2e:f8:46:d1:6f:3c:33:5c:b6:0a:e8:8b:f6:
16:4b:8a:b2:a4:a1:77:1c:73:f4:63:15:26:e2:b7:8e:29:e1:
c6:fb:ad:f5
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgICRFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjQwMTAyMTUxMDE2WhcNMjQxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0RUFFNDExMC8GA1UEBRMoRTgyNkQ5NDIwQkNGNDVBMTA4N0QzMDEz
QkI0RTRBODQ5NjBENjFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL8PngMkqhuYB93+SmF7Xs9el2YUIF7r030IdGmKv8PxLXevyNsOU2orOKNlX2mI
aqIpKLxtlFNLkX61gijGd7l5zNfo4+f/q46exIoW6/ZU500Q3PMLFpT1NcWwiTdP
rzsxge09HSeXlDygjK9W6zLFbYvzLl2ge6Jb8TyM3ST9F6KvFQMhw6S/r0/jdE9Q
N0BtEKJcuF6cB4jqcewPkH3Bw+4jj69xeKLITvSqnW89mU5VpD5jPI80g/6Y+P2l
rPjUbvOhmmYUIjeI/nVI8gFX8AaOIN7rfEC0ulCyu5kqRFKG1gUEn0G0DgK3R8uL
ouU+D8TWGq4SpkHfnzO/QzcCAwEAAaOCAvYwggLyMB0GA1UdDgQWBBToJtlCC89F
oQh9MBO7TkqElg1hxzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNzY0QTA2NjAyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFQUU0Lzc2NEEwNjYwMjU3NTExRTdBQzBEMTcyQUM0RjlBRTAyLzZDYlpRZ3ZQ
UmFFSWZUQVR1MDVLaEpZTlljYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABB/oAEDANBgkqhkiG9w0BAQsFAAOCAQEAESENHUgK9R0XyuIW
1NXHAwVluZ7bDxpRZiw1t6nRnUKJdq0kArwm9e6xhAfaNBBeI2+VHvGfcBoiMpF5
DNVY3WzrTMAPxoHiquzUZzxXRVgxps6hjESNZTwwofQAywNcUaZEwgbZVi/80nlo
lmBL3GtVPOMM/ZMdwIV2rNpkdT9kev9WXH1ay4dLNxo25ePHUdiEZbDgQmzUhPCm
JTOKM1QAiIXwRZCK0kdnquThgi8rApKOhDFopGQX5oCCZlIRBgDeNWhYhYC/a7Vn
OkA8jMBYXOCbg8j4qjxk3gcu+EbRbzwzXLYK6Iv2FkuKsqShdxxz9GMVJuK3jinh
xvut9Q==
-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org