Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
File: _zNBly3YofaHHt6Gmjod2SUorrY.cer (raw, json)
Hash identifier: WRaqhxWN37WadDDkdKR8qfrNul6iaW0m9jQmgqp96C0=
Subject key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4724
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jul 2024 17:16:08 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 46.250.160.0/19
IP: 62.245.0.0/19
IP: 80.238.128.0/17
IP: 83.101.0.0/17
IP: 87.119.0.0/18
IP: 89.150.192.0/18
IP: 94.45.160.0/19
IP: 94.74.64.0/18
IP: 94.244.128.0/18
IP: 176.52.128.0/19
IP: 188.119.192.0/18
IP: 188.239.0.0/18
IP: 212.34.192.0/19
IP: 213.250.128.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18212 (0x4724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 12 17:16:08 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:19:c1:b3:f4:d2:c2:a3:be:76:a9:ec:f4:
28:81:bf:ea:bf:f1:74:92:44:3d:79:5a:ee:83:48:
03:c9:e6:9c:6d:f1:47:03:6d:ef:1c:56:c6:53:e8:
5f:fd:b5:de:ce:9b:1a:00:f5:3f:f1:16:87:45:89:
c0:31:ee:78:43:49:62:6f:93:77:24:c4:c0:8d:f4:
4d:50:cb:d4:ee:b7:d6:b7:7c:e3:4c:39:f3:a6:71:
5d:76:25:e9:36:29:85:a0:b7:05:8a:f6:2f:f5:14:
44:ff:80:2e:16:6b:ee:17:89:52:63:ee:2c:85:20:
c3:76:da:db:7c:47:b3:e1:00:9e:d3:b2:52:de:39:
e3:50:c4:87:9c:03:10:5a:73:2e:c4:74:a4:7b:ff:
af:cc:c3:e1:7d:fc:50:a2:7b:7d:95:65:7e:57:5b:
12:1f:e2:2a:78:50:fd:a3:92:1b:8f:de:e0:6c:3d:
f3:47:96:81:b6:68:79:8f:07:1d:49:49:d5:71:4d:
7d:5c:a0:0b:3b:56:72:c3:30:26:76:b2:30:5a:f6:
bc:41:09:fc:c2:6c:00:eb:30:8e:ba:9c:a7:2d:01:
4e:8b:25:58:58:47:81:57:6e:42:57:b6:c2:d6:39:
c5:ff:18:65:4a:c1:4d:dc:33:c8:36:c3:db:5b:cb:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
46.250.160.0/19
62.245.0.0/19
80.238.128.0/17
83.101.0.0/17
87.119.0.0/18
89.150.192.0/18
94.45.160.0/19
94.74.64.0/18
94.244.128.0/18
176.52.128.0/19
188.119.192.0/18
188.239.0.0/18
212.34.192.0/19
213.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
97:33:e9:11:15:20:d7:55:ae:38:a1:b2:cd:0c:ac:e8:0d:6a:
e5:5f:83:f4:16:28:4a:d6:69:c6:08:26:80:c7:65:38:9b:3b:
54:f1:6f:a7:cd:ca:ec:ab:e1:df:96:32:a6:34:80:1f:20:62:
a0:2a:0a:1a:36:5d:24:ee:7b:d1:fa:b0:ff:e3:fd:54:ed:d1:
7f:49:b0:cd:07:ce:4a:55:00:03:05:1f:e4:1d:cd:fa:5d:23:
c6:9a:b5:1c:a9:5c:64:b2:72:f1:41:3a:6e:18:aa:76:a8:a9:
2d:dd:e9:84:bb:02:fc:bc:0e:a0:f8:27:05:02:05:58:bb:ba:
cc:72:5d:d5:27:ec:3e:17:51:4e:f9:04:16:89:ed:80:93:9d:
9b:c8:43:19:e6:3c:f2:89:50:bd:ce:b5:0c:fb:83:43:50:47:
1c:95:4a:93:7e:9a:21:4b:1f:27:6c:f6:e6:da:97:b2:d1:94:
b2:e1:1b:b3:81:7a:d3:48:92:b4:24:ab:1f:1b:16:4f:1c:70:
36:0e:6e:c9:e6:31:bd:dd:0f:af:02:b1:c9:a1:56:25:f7:a5:
d8:35:51:8b:4d:43:eb:e1:8b:20:21:6c:94:64:41:4e:92:88:
73:b2:a4:a0:88:f1:2d:7a:02:8e:78:45:fd:3e:b5:f5:57:7b:
e7:07:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:04 2024 by rpki-client on console-fra.rpki-client.org