Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
File: ucp5-2hcLv8_ucy5zS2EgRaQijI.cer (raw, json)
Hash identifier: mhlXVLmISheyztmpmd+sahXWl0sfWGHNP4IQFhSg/H4=
Subject key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5220
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Feb 2024 23:31:37 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.196.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21024 (0x5220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 13 23:31:37 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:48:d5:1a:17:20:57:cc:ee:4b:eb:5f:e3:
1d:3f:44:a9:25:ec:70:ef:48:f4:82:1a:e8:80:a8:
54:84:6f:d7:44:4a:10:8e:9f:d3:c0:2b:9a:66:1f:
a2:44:71:c8:14:09:17:76:bd:ac:35:93:16:38:e8:
95:9e:6d:32:ac:21:56:51:c1:8f:cd:a8:6a:d3:76:
dc:4a:c1:7c:51:91:07:23:b7:ee:d4:01:35:1c:74:
a5:ce:68:d6:d6:63:31:2d:fd:06:fe:50:be:bd:88:
57:b9:26:24:a2:a5:c8:d4:44:3d:02:c0:2b:c8:86:
d5:89:9a:67:7b:cf:11:bf:dc:b2:1a:c1:9b:f4:e7:
38:34:f9:39:d7:c1:c1:df:ae:c8:21:25:35:d5:52:
22:ad:c4:b8:f0:67:5d:88:a6:00:e0:fc:a5:9e:f3:
32:f1:29:7c:b2:72:d9:56:7f:48:c8:54:bb:6e:8f:
b2:c8:3e:d9:95:02:7b:f3:b8:a2:ae:e3:2d:ac:35:
99:4e:5f:dd:80:cb:37:24:2e:9f:2b:0f:35:4d:e8:
0b:f6:33:44:a5:f6:9a:10:43:a4:f9:f9:73:59:fc:
06:37:16:4e:e4:7e:d6:20:8c:06:14:40:4a:47:b2:
1d:8e:dc:3b:7a:60:cf:6e:3a:22:4b:ad:9f:e5:c0:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ec:a8:2e:3f:0d:5a:85:1e:29:a1:d5:0f:20:58:b3:2d:cb:
5c:ad:0f:0b:6a:cc:86:d8:49:8b:72:2b:ec:6b:60:12:83:d9:
f2:ea:54:45:51:03:08:97:0f:2d:b7:41:03:74:cc:05:5b:28:
ef:a4:46:70:15:e2:b8:97:98:87:26:ea:94:9d:99:23:aa:04:
f0:36:68:53:4b:60:80:70:92:25:73:a9:6e:92:1a:7a:a0:75:
8f:35:ed:a6:80:8b:83:4f:53:41:91:67:6e:a6:3f:9f:09:37:
7c:8c:2b:cc:8b:d9:ef:df:ef:d5:0b:2f:5b:25:e1:c2:33:50:
85:71:c5:e2:ad:be:6e:3a:f2:3e:0c:ab:5b:8c:95:55:67:38:
8b:ad:9f:d9:9f:d9:3e:1a:22:19:60:9c:bb:26:3d:59:4b:86:
d1:19:e0:f9:56:91:0b:a2:3c:64:fd:91:b8:8d:f7:b0:9b:de:
31:bb:8b:bb:81:1a:ae:53:44:63:8a:40:c2:74:78:c9:e9:b0:
36:eb:ec:57:29:88:ef:dd:95:1f:42:87:06:3f:0f:37:fa:0d:
a7:70:11:f0:6b:5a:65:0b:29:3e:5a:48:4f:5b:90:c9:78:4e:
7a:6b:75:57:bf:cd:e3:1c:f7:16:7d:84:27:e3:d4:45:ac:8e:
12:2b:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:13:53 2024 by rpki-client on console-ams.rpki-client.org