Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
File: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer (raw, json)
Hash identifier: ZS3MB200p/XtAqfoO95iSzu10lz0QyiZRFhG9oXNZpA=
Subject key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 48E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 15:50:21 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 217.194.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18662 (0x48e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 5 15:50:21 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91452AC/serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:3e:ff:56:a4:9c:bd:2e:7f:98:81:77:ce:
93:9c:38:5d:3c:9f:bb:9f:0a:ff:ca:04:66:a7:aa:
01:04:92:a0:be:90:4e:63:70:0a:fa:d2:7a:b7:d0:
68:cd:a6:70:80:41:57:b8:88:af:bd:57:7e:8c:40:
ec:28:b4:2b:c5:4c:88:8f:37:d9:5c:20:d6:46:e8:
b7:9d:27:1c:1d:6b:84:ed:49:6a:65:7d:84:91:22:
51:33:6a:94:31:13:b3:2e:f2:de:ec:e8:13:c1:e5:
91:d2:e3:84:12:7a:b3:39:fe:57:c4:81:75:c5:c0:
36:25:4e:0d:c6:dc:9f:f6:80:b2:71:fc:f7:7e:3b:
39:55:73:0e:68:3a:63:39:09:61:64:da:24:1d:b5:
54:ba:97:ad:be:47:61:1a:cd:ee:2f:b2:58:2f:f6:
d2:18:a2:b8:23:c4:6f:d7:b3:04:64:e2:0c:99:0e:
50:b0:ea:91:ae:ca:e2:07:d6:4f:e2:02:2b:2a:85:
ea:3d:91:fd:7b:69:b7:22:42:b8:8a:89:74:04:9a:
18:8b:cd:93:47:df:d0:2b:ab:e7:23:26:78:eb:29:
0a:81:0b:82:15:66:83:c7:74:b4:84:1a:68:12:b2:
8e:01:bb:53:4f:2c:5d:e5:10:b1:12:86:71:bb:70:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.194.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:7d:e9:0a:42:cb:e6:b3:b0:44:a1:5e:a2:67:99:ba:3c:9e:
5f:a0:8c:20:51:ee:42:6f:98:bf:4d:f0:b2:c8:da:25:48:ed:
b0:c2:94:71:59:f5:e6:af:57:67:92:33:b3:1f:1f:68:8d:bc:
e5:03:37:1f:d1:27:c7:69:ab:a5:f9:5d:25:6d:fe:c6:0e:6d:
5c:06:1b:8b:03:32:63:e2:16:a8:14:14:84:0c:bb:25:dd:29:
e5:fe:3a:0d:60:33:7a:90:ea:9e:63:6b:0b:0b:4d:e5:be:fe:
51:8e:56:a9:98:27:97:63:79:d9:3d:a3:ef:f3:eb:0a:14:97:
97:7b:2c:46:f0:43:05:b4:a7:08:74:84:59:bd:68:f3:83:27:
f0:3a:36:d3:91:3e:f9:fe:10:4f:46:f2:da:c0:9f:57:d0:6c:
db:32:d6:d4:97:f1:39:4f:aa:4c:0d:8c:97:49:50:40:5c:3c:
c7:54:35:ce:63:34:da:f3:5b:12:d3:0f:73:c0:3d:6c:10:1b:
dc:d4:d8:f4:04:89:1f:04:ee:2f:86:65:55:61:b2:64:c9:44:
35:9b:82:5c:04:c6:10:5d:7f:d1:df:63:5d:d1:90:d7:c5:d3:
84:3e:43:ad:bb:d7:33:3d:7a:49:ae:75:51:98:23:44:e3:f7:
c3:33:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:04 2024 by rpki-client on console-fra.rpki-client.org