Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
File: D6tO-YKPSvJnwW2K1HEKjuybu64.cer (raw, json)
Hash identifier: A+sUSeyWNPVNIENxW63goIvyzHqtr0G3H4byBLqdzVs=
Subject key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 46F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Jul 2024 05:44:26 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 217.10.226.0/24
IP: 217.10.229.0 -- 217.10.231.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18165 (0x46f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 1 05:44:26 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0c:00:dc:df:2f:fc:c2:94:29:3a:49:98:
73:f1:dd:1a:15:12:bd:65:8e:35:db:50:6e:67:3a:
2f:01:fd:99:6f:61:55:3e:7b:3f:82:8f:af:8f:20:
66:b9:52:de:52:c0:d6:e1:2e:3a:e1:57:81:7c:17:
e7:64:fa:14:e0:91:0c:26:4e:5a:5c:27:38:11:5d:
a8:99:bb:fa:3e:34:1c:34:a8:35:a7:f1:7f:e6:81:
22:e0:9b:69:64:e6:32:81:82:14:42:f2:c2:72:17:
04:d6:99:13:8c:84:a7:05:9d:d3:86:5c:04:18:77:
1c:a3:aa:7b:90:56:b2:47:66:e5:4b:4d:31:ac:d6:
3f:36:de:fd:31:ce:a6:86:1e:ef:c6:00:ed:06:d7:
23:34:b4:2d:19:41:74:7c:95:22:5f:7e:29:b5:0d:
cb:b2:8c:76:8b:0c:e9:41:d1:2c:d0:38:8a:01:ba:
3d:18:71:a5:33:bd:ca:3b:b3:dc:d3:d3:cd:4f:18:
e4:20:48:45:a8:84:93:6c:31:23:c1:58:9e:45:54:
b2:19:28:a5:19:1b:13:25:cf:03:6d:de:50:39:a1:
e7:86:9f:39:01:71:6c:5c:da:52:cf:54:13:58:22:
be:39:c5:7d:40:2e:33:04:31:5d:b7:92:81:14:1c:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.10.226.0/24
217.10.229.0-217.10.231.255
Signature Algorithm: sha256WithRSAEncryption
b6:14:22:b5:bd:9c:bc:32:11:74:7c:08:db:3d:95:ab:74:71:
87:85:e6:68:a8:49:02:b6:3f:24:a6:3c:a5:b5:2e:6c:aa:2c:
32:49:3c:c9:3f:53:d5:25:4c:4c:37:c8:49:06:93:8c:94:28:
ca:c5:51:df:0f:32:47:30:8b:18:dd:e6:68:7b:fe:8b:a4:8f:
f5:89:d2:5f:5f:c6:69:9c:bd:a1:7e:f6:da:92:36:4a:e3:79:
d7:1f:0a:5f:da:63:dd:11:47:49:b9:45:9d:22:93:10:2b:56:
0c:4c:ed:18:30:8f:ec:db:f6:3e:a9:12:82:3d:09:ac:0c:0c:
3b:92:8e:98:7a:30:25:f3:71:28:1b:14:4b:69:d8:e0:46:45:
60:df:3a:30:c6:2c:31:ea:29:db:de:ca:8a:d2:1a:11:9f:72:
f3:aa:04:1e:49:7b:7a:86:74:ed:5f:fd:72:6a:ca:ab:b5:04:
8e:68:1e:a7:cf:e2:ea:1a:44:0c:c5:e1:41:2e:16:8f:48:43:
37:7b:d8:c4:37:9c:fe:1c:df:39:42:1d:94:b4:94:c3:29:f4:
1a:0e:c9:b8:73:3a:ad:31:7c:f0:fa:1f:64:ae:d3:35:dd:ed:
62:f3:9e:3b:3f:41:f8:fe:65:20:9d:f3:64:61:3a:5e:41:e8:
e8:f9:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:04 2024 by rpki-client on console-fra.rpki-client.org