Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
File: _zNBly3YofaHHt6Gmjod2SUorrY.cer (raw, json)
Hash identifier: pMJ0fDAElvRnBT4G+LED+C8K75DCcfWZiUhzbBx99wk=
Subject key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 434C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Oct 2023 15:35:29 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 46.250.160.0/19
IP: 62.245.0.0/19
IP: 80.238.128.0/17
IP: 83.101.0.0/17
IP: 87.119.0.0/18
IP: 89.150.192.0/18
IP: 94.45.160.0/19
IP: 94.74.64.0/18
IP: 94.244.128.0/18
IP: 176.52.128.0/19
IP: 188.119.192.0/18
IP: 188.239.0.0/18
IP: 212.34.192.0/19
IP: 213.250.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17228 (0x434c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 19 15:35:29 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:19:c1:b3:f4:d2:c2:a3:be:76:a9:ec:f4:
28:81:bf:ea:bf:f1:74:92:44:3d:79:5a:ee:83:48:
03:c9:e6:9c:6d:f1:47:03:6d:ef:1c:56:c6:53:e8:
5f:fd:b5:de:ce:9b:1a:00:f5:3f:f1:16:87:45:89:
c0:31:ee:78:43:49:62:6f:93:77:24:c4:c0:8d:f4:
4d:50:cb:d4:ee:b7:d6:b7:7c:e3:4c:39:f3:a6:71:
5d:76:25:e9:36:29:85:a0:b7:05:8a:f6:2f:f5:14:
44:ff:80:2e:16:6b:ee:17:89:52:63:ee:2c:85:20:
c3:76:da:db:7c:47:b3:e1:00:9e:d3:b2:52:de:39:
e3:50:c4:87:9c:03:10:5a:73:2e:c4:74:a4:7b:ff:
af:cc:c3:e1:7d:fc:50:a2:7b:7d:95:65:7e:57:5b:
12:1f:e2:2a:78:50:fd:a3:92:1b:8f:de:e0:6c:3d:
f3:47:96:81:b6:68:79:8f:07:1d:49:49:d5:71:4d:
7d:5c:a0:0b:3b:56:72:c3:30:26:76:b2:30:5a:f6:
bc:41:09:fc:c2:6c:00:eb:30:8e:ba:9c:a7:2d:01:
4e:8b:25:58:58:47:81:57:6e:42:57:b6:c2:d6:39:
c5:ff:18:65:4a:c1:4d:dc:33:c8:36:c3:db:5b:cb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
46.250.160.0/19
62.245.0.0/19
80.238.128.0/17
83.101.0.0/17
87.119.0.0/18
89.150.192.0/18
94.45.160.0/19
94.74.64.0/18
94.244.128.0/18
176.52.128.0/19
188.119.192.0/18
188.239.0.0/18
212.34.192.0/19
213.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
57:09:d8:ab:4b:d6:b1:6c:26:f2:a6:63:f5:85:ec:ad:e9:63:
73:b1:23:55:2c:93:13:df:98:43:e1:50:e3:09:20:4d:f4:5a:
00:70:07:06:79:c5:7f:0d:8e:13:ac:1f:74:c1:ef:c1:ff:24:
dd:07:4a:d1:be:4c:9e:ab:5a:55:7a:44:36:47:42:07:c9:d5:
86:d4:55:7c:7c:eb:df:2e:9d:34:b8:3e:a0:fc:5b:9c:fa:5d:
97:d1:af:b7:9b:49:4f:51:17:a6:b2:7a:6a:da:8e:bc:4c:e5:
2c:99:f5:dd:0b:61:55:e8:3b:8f:d6:af:f4:43:28:c4:0b:e4:
31:53:a7:9e:91:6e:d8:e3:bf:b3:b8:4b:e9:2e:ad:cf:45:e0:
53:59:ce:02:37:88:dd:45:5e:71:d1:59:80:a7:49:65:1d:a5:
d9:3b:b3:22:27:69:57:14:7b:89:72:2e:2c:49:e9:74:6f:cc:
0b:0e:c7:b0:24:e1:f8:c6:2a:a1:a0:9b:e4:de:82:ec:34:a7:
e3:09:89:ee:ca:59:b8:f1:f4:37:c6:5d:dc:98:0f:bf:9b:54:
4c:e6:9c:a7:9f:57:ab:f1:a9:00:8d:3b:34:29:05:a4:2f:9d:
f5:a6:f4:9b:73:40:7d:6a:cf:8c:bd:c6:75:25:c8:94:62:70:
a9:8e:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org