Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer (raw, json)
Hash identifier: F8iIuo7qPevcG0YpjtNiINuCiZCi/jg7XZUDILIaHUc=
Subject key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4820
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Sep 2024 18:28:55 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:11::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18464 (0x4820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 13 18:28:55 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:0d:6a:72:29:3a:21:5d:68:4e:15:55:23:
7f:e2:a6:2e:a8:63:a4:0a:0d:44:52:e2:56:ff:61:
39:97:19:7b:aa:27:dc:77:56:3c:71:e0:f5:18:e0:
90:b3:4f:8b:35:49:fd:a1:5d:bd:6c:c1:a6:58:e2:
75:11:d3:c8:82:5b:3f:f1:cb:d0:93:48:d4:f0:87:
d0:e7:55:4e:fd:91:26:4c:9a:6b:10:b4:39:b7:64:
3c:af:60:b9:d8:bd:7a:85:0f:10:08:31:68:e8:b8:
c6:ed:50:0d:b8:58:fc:eb:15:fe:4b:49:04:24:dc:
52:c7:b6:40:e7:02:95:81:17:72:5d:15:d3:c5:e6:
cc:cf:05:65:6b:23:a1:f3:3f:ec:96:46:33:c9:91:
9a:ba:16:7a:59:50:e9:62:8e:38:96:49:60:a9:0d:
69:8c:d5:84:51:79:fd:d9:cd:34:5e:82:0a:43:f0:
77:7c:24:74:2c:15:7d:cb:e5:02:16:ce:70:03:a2:
a6:04:c9:a5:80:b9:b8:61:ba:2f:b7:fb:d0:d7:55:
52:6e:a4:05:6d:89:83:4a:2a:7a:b6:ea:dd:9f:13:
20:85:c9:24:66:60:d6:ba:06:27:97:43:66:c3:75:
1c:71:54:99:33:d2:d4:d5:0f:8a:d9:78:66:0e:68:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:11::/48
Signature Algorithm: sha256WithRSAEncryption
3a:b1:94:30:dd:bf:90:03:9d:62:7f:d7:d0:2d:e7:99:0c:e2:
5f:76:15:18:a6:c2:97:8c:66:5c:d4:65:56:cf:83:4b:d1:44:
d3:f8:93:21:5d:de:3c:ce:1a:f4:93:0e:fb:3f:05:19:cb:78:
c8:23:81:5e:e4:db:f6:ce:63:ed:bc:84:d9:e4:10:fb:74:46:
cb:21:a9:5a:96:47:f2:21:13:a2:91:90:e3:b7:1d:35:67:f2:
92:31:85:f8:53:6c:26:d8:92:0d:9f:58:0e:16:5c:32:d2:2b:
96:31:ce:52:a9:34:2e:ce:15:c1:17:f8:82:f3:9e:f3:24:30:
23:b3:3e:08:08:b4:5b:b6:b7:13:c4:ea:81:89:ef:b8:5a:00:
85:dc:54:6e:4e:0c:54:af:50:4b:c4:8e:a4:71:48:69:3c:f1:
81:9d:c0:7a:81:97:85:3a:89:92:57:12:c5:c3:9a:7d:11:9b:
7f:3a:30:09:d2:a8:54:5f:c4:fb:33:9a:43:97:f7:fc:fe:40:
22:30:da:19:08:f3:39:ab:bc:f7:13:30:0a:b7:7f:62:94:9f:
c2:f2:8d:8f:d0:8a:27:6c:8a:fd:14:46:27:cb:94:f0:a8:e2:
84:5a:9e:45:8b:e6:67:16:9b:5d:59:d3:c3:f9:3e:22:8d:42:
68:df:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:04 2024 by rpki-client on console-fra.rpki-client.org