Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.cer (raw, json)
Hash identifier: 7U3Ew5VZz9dR+CkE+ywzhzDFmZJilPOik+OUalqko+g=
Subject key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E3E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Mar 2024 21:09:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2404:6800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 21:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123876 (0x1e3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 21:09:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:fd:89:79:bc:97:6b:23:01:7a:cc:6f:b3:
d8:43:c3:ac:59:f2:91:54:e3:e1:89:68:c5:9b:36:
87:c9:03:8d:ed:76:ec:0c:6a:d1:35:fe:25:ad:17:
bb:e2:dd:f6:af:00:73:48:7c:d7:ba:f5:bf:4a:7d:
5b:23:ed:f6:16:ea:2d:ff:c6:16:52:6d:bd:57:aa:
d8:53:d5:dd:02:4a:c0:07:dd:f3:6d:82:d1:23:c8:
47:d8:ab:4c:58:11:4e:8f:ef:51:e5:00:24:7b:1f:
8d:f7:1b:dc:1e:61:32:bf:66:78:4f:d4:2f:df:ed:
c5:44:f1:8d:2d:b8:b5:ca:c6:58:bc:ce:47:e0:84:
60:f2:5c:25:67:54:8c:bf:38:86:ba:36:7e:d7:77:
09:ab:2a:9c:46:a0:6c:dd:8a:7b:2b:15:b1:cf:27:
7b:a9:a0:43:4f:84:02:73:6a:76:d8:19:c5:12:68:
bb:6a:d8:c7:b9:b4:ce:2d:da:af:55:aa:a4:19:a8:
90:21:52:15:a3:a3:ab:1e:9c:3e:00:0e:49:95:ab:
92:c6:a3:4f:b0:97:d8:c1:d1:0a:78:a0:80:3b:6e:
2d:d3:29:36:39:07:e8:27:2c:0a:93:39:8f:28:10:
71:05:a6:5b:01:4f:a3:4a:1f:23:c3:1f:12:0b:df:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6800::/32
Signature Algorithm: sha256WithRSAEncryption
19:4e:dd:b1:95:ea:77:68:42:27:e5:80:dc:90:25:aa:9a:74:
fb:76:86:ef:f2:34:60:a5:4c:b5:09:24:15:04:af:23:84:ff:
38:7e:67:67:0e:79:10:cc:ab:f8:28:04:4b:08:6f:cd:35:92:
56:42:4b:f4:50:80:e7:83:15:00:4e:32:78:62:0f:cd:cc:29:
df:db:38:fd:51:d7:50:9a:99:2a:3e:66:14:34:06:c8:e2:a6:
c7:39:dd:79:30:4b:d1:38:e7:e5:83:69:8f:5d:d3:19:fa:55:
09:a9:cf:73:b3:c0:1d:9a:6c:d4:44:86:f5:59:c7:3e:86:3a:
34:ea:a8:5b:85:78:59:29:bd:6b:c0:a4:5d:6b:e4:16:4a:ec:
a6:7a:a2:88:ed:8b:2e:41:56:85:3a:ce:f2:b7:c8:6b:a8:c5:
4d:69:cf:85:61:52:44:c2:ed:7d:5d:18:b6:96:d8:07:35:21:
e1:ec:69:b2:8c:c9:0c:82:1e:83:27:f7:43:de:02:9e:0b:b3:
62:bc:6a:4b:8e:0d:98:d8:11:13:38:54:04:4a:b2:a7:e7:1a:
c4:d2:9c:fb:1f:6f:2e:6e:71:85:a3:3b:61:13:e5:9d:2b:1a:
67:c0:3e:5a:6b:22:63:c7:32:6e:84:e9:56:be:e3:51:2a:12:
62:ea:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:44:33 2024 by rpki-client on console-fra.rpki-client.org