Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
File: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer (raw, json)
Hash identifier: R2OipVs8hxxjsMJ8bONaXjKxf+8Eg+XuuB2z1XMmfiU=
Subject key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4382
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 15:08:28 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 217.194.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17282 (0x4382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 2 15:08:28 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91452AC/serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:3e:ff:56:a4:9c:bd:2e:7f:98:81:77:ce:
93:9c:38:5d:3c:9f:bb:9f:0a:ff:ca:04:66:a7:aa:
01:04:92:a0:be:90:4e:63:70:0a:fa:d2:7a:b7:d0:
68:cd:a6:70:80:41:57:b8:88:af:bd:57:7e:8c:40:
ec:28:b4:2b:c5:4c:88:8f:37:d9:5c:20:d6:46:e8:
b7:9d:27:1c:1d:6b:84:ed:49:6a:65:7d:84:91:22:
51:33:6a:94:31:13:b3:2e:f2:de:ec:e8:13:c1:e5:
91:d2:e3:84:12:7a:b3:39:fe:57:c4:81:75:c5:c0:
36:25:4e:0d:c6:dc:9f:f6:80:b2:71:fc:f7:7e:3b:
39:55:73:0e:68:3a:63:39:09:61:64:da:24:1d:b5:
54:ba:97:ad:be:47:61:1a:cd:ee:2f:b2:58:2f:f6:
d2:18:a2:b8:23:c4:6f:d7:b3:04:64:e2:0c:99:0e:
50:b0:ea:91:ae:ca:e2:07:d6:4f:e2:02:2b:2a:85:
ea:3d:91:fd:7b:69:b7:22:42:b8:8a:89:74:04:9a:
18:8b:cd:93:47:df:d0:2b:ab:e7:23:26:78:eb:29:
0a:81:0b:82:15:66:83:c7:74:b4:84:1a:68:12:b2:
8e:01:bb:53:4f:2c:5d:e5:10:b1:12:86:71:bb:70:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.194.140.0/22
Signature Algorithm: sha256WithRSAEncryption
33:5f:70:49:3f:4f:06:9f:29:11:d2:e0:53:bb:22:9c:e6:a5:
73:93:3a:58:14:44:0b:45:b2:82:20:d1:d1:e1:db:16:bc:39:
a4:0d:e2:bf:b4:b0:dd:d5:8c:7e:5b:63:64:e4:bd:47:3d:fc:
b4:86:c8:ea:19:60:7c:22:a8:2b:ef:3c:e7:5b:33:24:1b:98:
6a:66:0d:07:84:2d:53:12:ea:e1:b1:00:28:ab:6c:ad:2f:f1:
8f:a9:7e:1e:2d:97:b5:08:b0:58:4d:83:2b:b7:f0:b1:aa:11:
5c:6a:55:dd:7a:01:dd:4d:cb:b3:b5:f5:aa:ae:14:24:af:a8:
9f:ca:f2:4a:bb:c0:70:bb:2e:0d:f7:5a:7b:84:b1:29:68:db:
1e:a1:75:45:32:f4:96:46:5e:54:8c:82:d2:80:25:01:2b:75:
4c:a7:00:0b:c1:65:49:af:87:ff:d5:30:f5:5a:cb:70:8e:de:
ba:fd:ba:65:89:91:a9:0c:f1:bc:39:05:f9:d7:49:e4:09:15:
06:71:0b:c9:34:2e:03:4a:d1:bb:8c:1d:1e:d6:9a:5f:29:7a:
09:33:7b:f4:82:cb:09:89:8e:ad:80:a6:3f:40:d5:72:95:26:
3d:d4:3d:6f:96:c9:6f:af:b9:94:4c:3c:29:65:0a:c8:cb:a3:
c7:ce:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org