Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
File: tv1vS0-3wyR8WZKZsui6-1qLunI.cer (raw, json)
Hash identifier: +d4fcZb42Cy/z5S2/JV+ILcdEamIHBxENZkH31OGhYA=
Subject key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 45DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Apr 2024 00:12:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.193.0.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17882 (0x45da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 15 00:12:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:cc:26:2f:ff:e2:a1:08:f7:1a:af:4a:36:
90:3e:58:00:df:0d:c4:e6:28:19:c7:47:a7:db:ac:
88:1c:27:95:b1:84:15:95:73:28:3e:25:ae:dd:81:
b6:42:7d:67:6a:66:23:e5:78:97:c1:d4:57:0c:c8:
b7:05:60:c7:1a:32:b1:be:e2:68:ce:43:ac:4e:b2:
7c:a9:19:3b:d9:3a:d5:d8:5f:94:84:02:94:86:9b:
c6:1a:81:09:4f:67:a5:8c:b0:d3:bd:5d:c4:a5:46:
72:3f:34:b4:c5:03:c7:e8:ac:d9:34:73:32:63:b1:
91:e7:86:8d:79:35:f5:69:cb:30:d4:44:d4:48:4a:
2a:b2:98:bf:12:0e:e7:3d:7c:48:92:05:1e:e0:72:
79:23:6b:90:9a:e9:0e:4d:77:bf:d2:4b:66:5f:d1:
5d:10:4e:2b:85:a8:bd:e8:2f:58:81:1a:07:44:13:
9b:46:8d:0a:2c:dd:99:5a:e7:58:f9:51:12:1c:48:
9b:b5:2a:ab:74:86:bb:b2:92:41:f8:b2:b5:1a:95:
d1:36:0b:05:2f:64:15:14:f1:ac:c7:51:62:44:f8:
5c:e1:b6:aa:c9:92:d4:43:8f:b4:00:94:95:a5:12:
99:ab:cb:8e:48:e0:60:75:b8:9f:34:3d:f9:b7:35:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:43:f0:94:63:fb:ba:69:03:bf:61:6a:36:e1:69:f1:b3:29:
d1:f7:b5:e3:d0:e1:d8:b5:24:54:e6:5b:17:57:65:0d:59:3b:
84:35:ba:b2:db:88:a8:80:5b:02:6e:2a:34:e1:e7:63:22:96:
7b:fe:b3:3d:25:77:3b:4f:27:fb:13:17:1a:63:c9:fb:d7:ce:
27:cb:a1:88:a8:8c:a6:a9:3c:e7:f9:0b:e4:84:f2:a6:96:e8:
64:81:62:14:42:d4:02:68:25:c3:29:3c:e9:e2:a9:8e:59:d1:
f0:2d:f4:9c:0b:56:ed:a0:58:29:7f:3c:ae:1a:48:d9:4a:91:
e3:95:b1:ec:b8:50:e8:a4:29:74:85:f6:9e:0a:01:49:f9:fb:
2b:ae:a4:35:80:80:3b:a7:cd:27:2d:b2:af:51:f8:aa:28:c7:
9c:3d:66:3d:c5:0b:c6:9c:80:aa:c4:4b:c6:88:fe:33:a7:3f:
7c:0d:e3:86:44:a0:b3:d7:6f:69:9c:f1:cc:c9:b1:90:53:35:
03:f1:25:c8:3b:18:bd:df:aa:4f:fc:4b:da:cb:15:38:2b:47:
ff:00:f3:be:a4:0e:fd:d1:79:8b:c3:38:c2:0d:b8:32:7c:ad:
71:d8:e9:20:b3:5c:85:98:0b:06:a0:04:bd:78:fc:5f:80:48:
c0:dc:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:47:49 2024 by rpki-client on console-ams.rpki-client.org