Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
File: zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer (raw, json)
Hash identifier: 82i+ljAZbLwlDbt/nFGSXb+49fCWPP6YvTZg7sCsuwI=
Subject key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 434E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Oct 2023 19:13:35 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 193.119.0.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17230 (0x434e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 19 19:13:35 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3b:ef:f1:63:94:86:f2:65:79:fe:4c:0f:e2:
82:39:cc:99:0b:20:b4:9d:62:c4:8e:ed:24:9f:4a:
fb:5e:74:a3:86:f9:3a:41:8e:75:d2:73:90:0e:cd:
d1:e6:cb:3a:ae:fd:de:19:27:e1:cd:17:f0:75:70:
4c:74:e1:d7:ff:8d:42:7c:85:6c:3d:86:7f:8b:71:
aa:5e:3b:87:b2:ae:0e:9b:e4:43:9e:8b:d1:35:35:
97:55:8c:14:54:27:62:2e:dd:7a:50:2a:67:e8:4a:
56:b3:07:b2:db:46:e8:27:53:94:d0:22:f8:ef:85:
08:e1:4b:26:a4:bc:95:3c:8e:55:f0:5b:ef:09:ac:
64:de:58:73:88:5a:e4:14:b8:f1:6a:42:10:2f:49:
b4:0c:00:a2:ca:e0:29:f9:fe:5e:c1:33:e8:9f:81:
b8:74:36:f8:ff:6d:8c:a9:60:c6:fd:ce:2e:f2:59:
1c:58:f7:ea:4a:d4:b7:56:fa:4d:ea:4a:37:b9:66:
bc:49:dd:d5:03:42:3e:91:af:59:7e:52:92:cb:31:
7d:9e:73:16:de:a0:50:6f:ac:cc:13:96:8f:ae:74:
1e:b6:1a:e6:f5:ff:88:05:ab:ac:a1:5a:1f:c2:56:
ba:eb:8c:19:2c:de:60:45:b7:97:0f:2b:3e:a1:a5:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.119.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c0:c5:09:36:53:24:67:9c:38:86:1c:35:ca:c9:d4:43:25:0d:
04:99:c7:1d:a1:67:35:03:e5:50:27:17:f9:df:8a:c6:97:13:
81:14:f7:d6:a8:d6:21:97:06:f2:2a:f0:30:24:07:1d:90:57:
7a:9f:29:5c:11:93:8e:0c:49:d9:da:39:3f:f9:98:41:09:6d:
9d:d3:81:59:7b:64:15:b1:56:a9:5a:2b:d2:50:0d:0e:78:e7:
b8:64:25:51:73:20:05:78:fe:36:45:a9:26:8c:33:9a:04:e4:
8d:59:ed:ab:67:53:c8:7a:b7:c3:a7:52:20:d5:ec:70:55:3e:
f8:74:d9:00:ab:97:df:82:96:d2:b6:0c:bd:f0:62:8e:95:40:
26:da:09:f0:34:86:1e:7e:69:d7:15:55:d4:1a:f5:66:aa:d0:
b3:85:92:99:ae:d6:e9:76:3a:09:c6:df:18:ae:15:bd:81:0e:
bb:0b:b2:d4:23:94:a2:7e:7a:ee:fd:ac:53:d8:30:20:01:1c:
60:31:3d:a9:de:af:1d:3a:0f:98:ef:99:91:9f:68:b8:20:19:
54:9a:7d:07:db:3a:b0:40:6f:f1:dc:37:da:ec:c7:db:c0:cb:
76:de:e3:1a:5b:55:99:85:14:a7:75:54:c3:72:72:a8:eb:e5:
44:60:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:37 2024 by rpki-client on console-ams.rpki-client.org