Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer (raw, json)
Hash identifier: jnB+2qcwarzyeW1KHH0f/MZktxldoK85OEV0wk7LlVY=
Subject key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 42AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Sep 2023 17:41:51 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:11::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 May 2024 19:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17071 (0x42af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 11 17:41:51 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:0d:6a:72:29:3a:21:5d:68:4e:15:55:23:
7f:e2:a6:2e:a8:63:a4:0a:0d:44:52:e2:56:ff:61:
39:97:19:7b:aa:27:dc:77:56:3c:71:e0:f5:18:e0:
90:b3:4f:8b:35:49:fd:a1:5d:bd:6c:c1:a6:58:e2:
75:11:d3:c8:82:5b:3f:f1:cb:d0:93:48:d4:f0:87:
d0:e7:55:4e:fd:91:26:4c:9a:6b:10:b4:39:b7:64:
3c:af:60:b9:d8:bd:7a:85:0f:10:08:31:68:e8:b8:
c6:ed:50:0d:b8:58:fc:eb:15:fe:4b:49:04:24:dc:
52:c7:b6:40:e7:02:95:81:17:72:5d:15:d3:c5:e6:
cc:cf:05:65:6b:23:a1:f3:3f:ec:96:46:33:c9:91:
9a:ba:16:7a:59:50:e9:62:8e:38:96:49:60:a9:0d:
69:8c:d5:84:51:79:fd:d9:cd:34:5e:82:0a:43:f0:
77:7c:24:74:2c:15:7d:cb:e5:02:16:ce:70:03:a2:
a6:04:c9:a5:80:b9:b8:61:ba:2f:b7:fb:d0:d7:55:
52:6e:a4:05:6d:89:83:4a:2a:7a:b6:ea:dd:9f:13:
20:85:c9:24:66:60:d6:ba:06:27:97:43:66:c3:75:
1c:71:54:99:33:d2:d4:d5:0f:8a:d9:78:66:0e:68:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:11::/48
Signature Algorithm: sha256WithRSAEncryption
35:22:3e:41:5c:32:3e:67:bc:6d:be:3d:0d:22:cd:8d:2b:b0:
30:11:15:3c:48:84:51:96:96:71:49:48:e7:eb:c3:ed:02:bd:
6f:9c:95:f5:bb:2c:bb:b5:bd:a2:b1:70:c4:db:40:88:fe:4e:
eb:09:9e:0f:81:97:52:1c:33:02:40:0d:87:54:9e:66:f3:b2:
0a:95:6a:15:8f:c7:e0:e6:8d:40:13:c3:c0:b1:b7:4f:3c:e1:
cd:f7:6b:f8:19:ad:77:81:e0:cb:42:cc:00:3e:46:fa:fa:4d:
ea:d7:d5:9d:48:c8:fb:cd:8d:35:c4:d3:38:83:c0:ac:e9:87:
c3:22:3c:94:05:40:86:6b:fa:d8:7f:a5:bc:bd:83:e2:b3:b5:
8a:d2:1b:0e:3a:80:15:61:12:f3:a2:f8:e4:60:52:24:05:57:
18:36:7a:25:ac:bf:b2:20:e2:08:55:38:07:80:29:df:8a:12:
4a:31:04:0c:6f:5a:ab:5c:9a:4b:70:bb:55:dd:59:6f:9a:c3:
36:39:eb:40:f3:05:ba:bc:0e:76:9b:d8:f6:a3:7e:0d:d4:f8:
40:ff:52:1c:97:72:97:61:b0:d5:68:db:a0:d0:9a:f3:d2:6b:
ac:46:1c:f8:98:22:ba:7d:a9:ae:21:55:32:6c:13:f8:a4:64:
1c:28:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:52 2024 by rpki-client on console-ams.rpki-client.org