Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
File: D6tO-YKPSvJnwW2K1HEKjuybu64.cer (raw, json)
Hash identifier: if+A3dW2pZ/ahiNQ8yOr9y97qRG1Q6JGqJZuUbIMsts=
Subject key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4130
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Jun 2023 09:20:50 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 217.10.226.0/24
IP: 217.10.229.0 -- 217.10.231.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16688 (0x4130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 1 09:20:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0c:00:dc:df:2f:fc:c2:94:29:3a:49:98:
73:f1:dd:1a:15:12:bd:65:8e:35:db:50:6e:67:3a:
2f:01:fd:99:6f:61:55:3e:7b:3f:82:8f:af:8f:20:
66:b9:52:de:52:c0:d6:e1:2e:3a:e1:57:81:7c:17:
e7:64:fa:14:e0:91:0c:26:4e:5a:5c:27:38:11:5d:
a8:99:bb:fa:3e:34:1c:34:a8:35:a7:f1:7f:e6:81:
22:e0:9b:69:64:e6:32:81:82:14:42:f2:c2:72:17:
04:d6:99:13:8c:84:a7:05:9d:d3:86:5c:04:18:77:
1c:a3:aa:7b:90:56:b2:47:66:e5:4b:4d:31:ac:d6:
3f:36:de:fd:31:ce:a6:86:1e:ef:c6:00:ed:06:d7:
23:34:b4:2d:19:41:74:7c:95:22:5f:7e:29:b5:0d:
cb:b2:8c:76:8b:0c:e9:41:d1:2c:d0:38:8a:01:ba:
3d:18:71:a5:33:bd:ca:3b:b3:dc:d3:d3:cd:4f:18:
e4:20:48:45:a8:84:93:6c:31:23:c1:58:9e:45:54:
b2:19:28:a5:19:1b:13:25:cf:03:6d:de:50:39:a1:
e7:86:9f:39:01:71:6c:5c:da:52:cf:54:13:58:22:
be:39:c5:7d:40:2e:33:04:31:5d:b7:92:81:14:1c:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.10.226.0/24
217.10.229.0-217.10.231.255
Signature Algorithm: sha256WithRSAEncryption
b7:23:1d:4a:f5:60:a2:cc:7c:94:11:66:32:3d:21:16:5a:3f:
92:a6:91:65:16:38:b6:cc:46:23:7b:e2:af:d5:4a:4e:8e:9b:
f8:83:3c:95:16:6c:c1:2f:59:2e:09:2a:5a:7f:53:73:52:cd:
3d:f1:1a:8d:b7:1b:54:1f:60:ce:83:7f:14:10:e9:49:94:c3:
2a:92:9d:d3:ed:15:61:b3:a9:b7:14:37:fa:e6:8c:45:0c:1b:
85:61:a9:b0:a9:47:aa:e9:7c:47:0c:a2:06:b1:1b:a4:e8:11:
fe:f2:b1:36:5d:fe:d2:c3:6e:94:4e:72:1a:67:87:e1:00:63:
4c:fe:54:9e:07:84:b2:e3:7b:7b:6c:e1:0e:ff:b0:3e:3d:07:
70:c6:73:61:45:35:8e:a0:af:2a:4a:d0:98:c5:89:9a:59:44:
de:40:a4:38:b4:b3:bd:48:51:63:25:c5:2d:a4:2a:0d:15:48:
a1:b3:06:4c:6b:bc:4d:61:df:6a:f9:34:5c:0a:73:50:55:56:
24:bf:83:a9:c3:c8:b8:e5:79:91:77:51:ab:75:60:f9:66:46:
9b:3b:c4:76:d0:e0:cb:59:f5:f8:00:bd:b1:76:be:57:11:15:
e6:0a:d6:13:13:28:94:d2:32:3d:d5:a0:03:7d:ce:68:fc:36:
32:83:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:48:39 2024 by rpki-client on console-fra.rpki-client.org