Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
File: MZsxRPBqjysw1BIHH-EhB3T-huc.cer (raw, json)
Hash identifier: u1eihgvTPpRTUR0VIEbdZlWkp/+lAmVRZ1c0UI7+dwg=
Subject key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 44DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 31 Jan 2024 15:23:41 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 185.207.8.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17626 (0x44da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 31 15:23:41 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:69:2b:d3:0b:54:52:f7:2b:6e:93:b0:86:
93:2e:23:86:1a:50:9d:d8:6c:ef:25:04:a9:04:3a:
f7:b9:17:cb:b9:07:75:ca:e1:85:67:d0:d3:69:c0:
51:04:4b:ac:a1:33:2e:f3:22:b9:43:3e:8f:23:b4:
e2:84:05:91:9a:5d:be:4c:25:39:f5:fc:af:16:c7:
59:8d:97:74:f6:c2:5a:ab:9e:65:84:13:69:f0:83:
b0:dd:68:02:6d:41:58:52:c3:87:46:0b:99:36:9b:
05:9b:94:38:69:83:a4:5f:75:24:4f:e0:72:14:3d:
7d:bd:05:3a:b3:68:12:fc:66:9c:45:f5:4f:0b:1a:
66:22:0a:66:b7:77:e2:81:51:d1:fc:2e:6a:91:79:
ec:45:83:63:1f:3f:2d:b2:e6:56:0b:11:33:cd:d1:
00:73:cc:34:76:86:ea:53:63:9e:4e:0b:4c:6b:79:
71:ee:3a:7d:8e:6b:56:7d:1e:60:fb:b0:96:ac:23:
23:a7:92:a5:db:e8:42:1d:02:8a:40:b6:b8:bf:eb:
8d:7e:09:42:35:9f:76:c2:f0:a7:f2:43:76:3d:d7:
76:12:12:c2:96:47:6f:dc:c6:58:da:09:d5:61:62:
88:f7:40:d2:fb:e4:40:5f:a0:09:7a:f9:e1:4b:1f:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.207.8.0/22
Signature Algorithm: sha256WithRSAEncryption
35:8f:5e:6b:1d:fe:6d:05:5e:69:b7:3e:d0:66:e0:cd:1c:84:
19:30:2a:e2:50:48:f0:20:d9:c6:c5:1d:5e:bd:07:af:bc:51:
69:81:3f:67:cb:71:fb:5e:8b:ec:b6:8c:83:86:86:be:d1:e0:
ac:65:ae:63:3f:d1:2d:9e:7f:92:bf:3d:60:5b:51:ae:15:f6:
bc:87:d4:6e:60:72:4a:91:34:6d:13:01:9d:12:db:d2:f9:bc:
ce:50:8f:fe:d6:27:58:7e:75:38:e8:85:f7:4b:7c:bc:06:56:
c1:86:ec:f6:44:23:18:a1:2d:4a:3b:3b:07:00:03:ad:a1:3c:
79:ac:86:12:b7:8c:f8:fd:86:e8:62:fe:bc:ba:e2:6b:54:02:
4b:91:ec:8c:c7:f4:f1:e1:72:eb:4c:19:82:9c:2d:21:98:b2:
46:48:8b:ac:17:3f:79:e7:8a:7d:b0:cb:15:6b:36:d5:82:5e:
fc:cf:62:0d:01:b8:6e:ed:18:dd:fa:84:78:94:ef:a1:2e:09:
78:76:7d:c9:1b:39:e0:bc:51:e1:58:e7:40:dd:05:06:9e:35:
d4:6d:84:d4:fb:f3:9a:ee:95:93:98:2a:f8:62:a5:ce:f8:a2:
f6:87:2a:42:a8:9c:b4:bf:ac:81:b9:7c:6a:f2:0a:05:fe:e0:
58:c9:4b:b9
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICRNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjQwMTMxMTUyMzQxWhcNMjUwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5NzFDQjExMC8GA1UEBRMoMzE5QjMxNDRGMDZBOEYyQjMwRDQxMjA3
MUZFMTIxMDc3NEZFODZFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMiTaSvTC1RS9ytuk7CGky4jhhpQndhs7yUEqQQ697kXy7kHdcrhhWfQ02nAUQRL
rKEzLvMiuUM+jyO04oQFkZpdvkwlOfX8rxbHWY2XdPbCWqueZYQTafCDsN1oAm1B
WFLDh0YLmTabBZuUOGmDpF91JE/gchQ9fb0FOrNoEvxmnEX1TwsaZiIKZrd34oFR
0fwuapF57EWDYx8/LbLmVgsRM83RAHPMNHaG6lNjnk4LTGt5ce46fY5rVn0eYPuw
lqwjI6eSpdvoQh0CikC2uL/rjX4JQjWfdsLwp/JDdj3XdhISwpZHb9zGWNoJ1WFi
iPdA0vvkQF+gCXr54UsfBFECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQxmzFE8GqP
KzDUEgcf4SEHdP6G5zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcxQ0IvMDEwRUIyODg4MDg5MTFFQjhCNTA1RjIwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3MUNCLzAxMEVCMjg4ODA4OTExRUI4QjUwNUYyMEM0RjlBRTAyL01ac3hSUEJx
anlzdzFCSUhILUVoQjNULWh1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArnPCDANBgkqhkiG9w0BAQsFAAOCAQEANY9eax3+bQVeabc+0Gbg
zRyEGTAq4lBI8CDZxsUdXr0Hr7xRaYE/Z8tx+16L7LaMg4aGvtHgrGWuYz/RLZ5/
kr89YFtRrhX2vIfUbmBySpE0bRMBnRLb0vm8zlCP/tYnWH51OOiF90t8vAZWwYbs
9kQjGKEtSjs7BwADraE8eayGEreM+P2G6GL+vLria1QCS5HsjMf08eFy60wZgpwt
IZiyRkiLrBc/eeeKfbDLFWs21YJe/M9iDQG4bu0Y3fqEeJTvoS4JeHZ9yRs54LxR
4VjnQN0FBp411G2E1Pvzmu6Vk5gq+GKlzvii9ocqQqictL+sgbl8avIKBf7gWMlL
uQ==
-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org