Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer (raw, json)
Hash identifier: g0AlGQaychGQP6hE795dvoh7F+2iaQaqbb6XOfJd3cY=
Subject key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4606
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Apr 2024 17:17:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.113.70.0/23
IP: 91.199.209.0/24
IP: 164.152.166.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17926 (0x4606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 25 17:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:9d:1f:7d:04:02:ad:69:e3:a9:a2:86:89:
b0:fb:2e:34:c3:63:9a:13:6a:e7:49:3a:49:3c:7e:
8f:99:d2:42:61:51:00:b2:a7:84:23:29:ca:60:8c:
dc:6e:05:20:78:62:60:dc:a3:d9:27:79:04:f3:9a:
ac:45:03:6a:e8:db:71:f9:9b:eb:0a:32:a8:a0:d4:
ea:8b:9c:d3:db:7a:c1:6a:35:b0:38:75:bb:08:92:
d2:d1:75:3c:03:bb:7a:35:7e:62:02:f1:ba:28:63:
4c:45:76:07:df:0d:d8:22:76:97:69:54:21:26:86:
e4:e1:c8:77:8e:98:41:1d:c6:65:eb:2d:73:ad:95:
ff:94:f9:7e:dd:13:60:e0:b8:7f:b3:f5:10:fe:b6:
1a:2d:c1:37:94:84:2c:c1:db:33:56:1d:f2:5c:19:
f5:9f:32:55:2f:82:fc:6c:f3:84:2c:15:1e:80:7c:
d3:a7:8e:10:95:7b:da:a3:07:a4:14:d4:95:24:7d:
70:5c:fa:d5:e1:80:0a:ec:13:62:8e:39:c2:c7:c1:
92:bb:f6:1e:4f:17:39:75:5e:52:17:00:e4:69:97:
7c:51:1b:e6:7b:29:7c:36:e6:60:05:1d:bd:8b:bb:
56:b0:e6:bf:36:da:b9:69:d8:0a:cc:66:b9:81:ad:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
85.113.70.0/23
91.199.209.0/24
164.152.166.0/23
Signature Algorithm: sha256WithRSAEncryption
26:8c:f5:bc:8b:48:6f:6b:4e:51:91:ae:52:8f:f0:a9:81:e7:
d4:e5:af:48:50:19:10:91:49:a0:77:99:ff:14:2c:f2:74:fc:
19:b9:ac:86:1b:65:97:df:21:f2:34:37:e2:26:cc:55:c2:8b:
18:8d:0b:df:e1:9e:92:76:e2:7c:aa:27:cd:78:bd:ed:9e:89:
e7:17:fc:a9:ea:ba:a4:64:d3:6d:18:fb:48:de:36:6e:cf:1e:
d2:89:b0:0c:db:a2:79:2b:62:bb:2e:70:05:1b:4d:7d:ed:3e:
78:5e:91:6b:48:2f:05:a8:eb:2b:f4:e1:00:c0:da:df:a9:20:
fe:a7:d3:23:61:e7:20:02:d9:8a:7e:30:1a:73:fd:54:3e:0b:
6f:fe:d2:fb:f7:ad:62:89:59:d4:1e:c0:e5:00:94:6f:d6:57:
87:77:aa:67:ab:af:4a:8e:77:71:2d:50:4c:c0:b9:9e:24:64:
15:b0:a0:c1:32:a3:a0:d0:c6:b7:2e:dc:f8:2c:8d:c0:f1:9e:
30:e1:7f:ef:55:e1:34:95:41:a3:f7:db:75:b3:c4:11:a3:85:
99:af:29:b3:a3:53:d3:50:47:8f:f6:81:33:f7:ca:e9:37:cb:
a7:1b:42:5b:82:7d:4a:d5:33:e5:14:4a:47:3c:fb:72:a2:a5:
b1:02:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:48:39 2024 by rpki-client on console-fra.rpki-client.org