Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
File: pObuKivUtt87NTuua8SJKm047yk.cer (raw, json)
Hash identifier: DxzgIwkODYegU3NJ62abnCSqp8IZY2r6db7bGCjj920=
Subject key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4864
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Oct 2024 12:56:30 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 185.203.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18532 (0x4864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 1 12:56:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:db:9c:d4:ca:12:b5:0a:d3:72:e6:ad:34:
99:83:cb:40:16:3d:e0:b7:5b:f6:e0:90:08:08:38:
6b:cb:0d:4d:d1:b8:53:fd:46:d8:44:79:26:bc:76:
96:91:50:6f:88:b2:3b:82:27:90:7e:58:59:97:d7:
ab:47:ce:b9:c0:24:21:e8:85:ea:02:52:6d:9c:a2:
cd:8d:98:16:bb:6b:d6:7b:ab:40:d2:ef:2e:29:66:
55:66:23:61:1c:c9:2f:85:ba:52:fe:2a:80:e3:3a:
ce:eb:37:13:9c:d2:e3:f7:fb:48:20:92:1e:84:b7:
37:3a:b6:68:b7:80:5b:2f:0b:cf:38:dc:78:cc:04:
27:c9:00:b6:c2:1a:6f:94:39:04:5e:a4:3d:09:6c:
11:d8:e1:fa:e3:43:47:c7:e8:c8:2f:1f:44:9e:1e:
c7:d7:04:e2:7a:87:c7:56:5d:c4:23:d0:91:10:0d:
08:10:8e:0b:13:26:51:bd:d7:dd:55:90:e4:e6:54:
fd:bd:00:ce:78:d6:1c:06:c6:af:1c:9c:b5:59:f5:
d0:b8:52:5e:8f:42:6a:22:d3:78:85:8b:01:d4:5c:
ef:03:1c:7c:df:e6:ce:75:22:b8:07:ce:6d:7d:51:
fa:3d:5e:87:3e:91:61:05:71:b3:e2:9e:3c:fc:bc:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.203.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c1:f4:02:bf:db:c1:96:13:c6:63:43:03:2a:bf:dd:53:ce:
5c:89:1b:06:f4:d6:65:3c:b5:e8:43:6b:09:26:b0:fa:86:b4:
9a:83:63:7b:db:be:32:80:01:a7:1e:a5:58:97:e0:ff:c6:68:
b3:f4:92:48:46:99:41:ce:6c:2a:99:9f:91:ef:06:b1:a6:f0:
3c:c4:bf:fc:bd:4d:fa:fa:39:54:67:04:db:39:75:64:f5:c6:
55:ad:51:60:ac:e8:3f:78:73:26:e5:41:0e:8b:77:50:d6:cd:
6a:bd:15:3f:be:ad:a9:24:48:e3:6e:ef:56:0e:fc:84:20:92:
7a:b1:80:7b:37:35:63:5a:db:ba:32:43:af:fa:29:06:7a:e1:
62:e6:c1:73:31:b4:3e:ff:1d:59:3c:00:83:fb:a0:a1:75:9d:
c1:71:e7:d4:f1:5c:be:f4:55:d2:28:3f:78:75:4c:06:16:2b:
1f:99:3a:71:4f:1f:51:b0:ab:3d:11:27:06:2b:37:93:2c:37:
1e:b5:3c:a0:9d:7c:8e:8e:c1:59:44:da:be:0c:4f:37:3c:46:
54:33:94:3d:8a:eb:bd:c7:fa:04:a3:99:e7:51:1c:bb:69:d0:
08:fd:30:f2:3f:0e:79:46:93:c4:01:8a:d7:d2:bf:b2:8a:d3:
ba:06:59:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:54:07 2024 by rpki-client on console-ams.rpki-client.org