Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer
File: DkTRm3yVibI0LQUesJRJN0je608.cer (raw, json)
Hash identifier: 8YSW9ZMXiPVB2u5Y4gNF7uBgUPOI8Y6DFX9hRwkXPkk=
Subject key identifier: 0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E885
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Apr 2024 02:57:16 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 2405:f380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125061 (0x1e885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 02:57:16 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91C6504/serialNumber=0E44D19B7C9589B2342D051EB094493748DEEB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:fb:6b:cb:31:38:9e:42:8e:93:72:b6:21:
a8:9b:19:fa:12:7e:67:a3:e2:81:74:3c:48:ca:1b:
6d:5f:7e:ff:d1:52:ba:fb:a3:78:f5:7e:69:9b:3e:
d3:1e:c4:1c:c3:7f:7e:83:d1:cd:f3:91:a3:12:cd:
a7:39:84:27:3a:79:80:37:5e:24:49:87:4c:75:af:
13:c8:9d:f8:7e:ab:07:17:be:5a:e2:1c:bc:3b:0c:
1f:66:8a:04:ea:a6:54:b6:40:d4:14:85:a8:40:6f:
55:dd:b4:19:47:84:05:b1:91:39:6a:c2:68:9c:8f:
18:b9:bc:4c:63:cb:2f:3b:49:2f:1b:4a:f5:3f:bb:
8e:fb:21:18:66:ac:77:d0:dc:aa:d1:8c:5b:ae:14:
54:53:44:1d:51:04:a7:a9:65:1f:19:04:3d:fb:d9:
4d:ca:40:d7:ca:44:ef:29:be:e4:13:7e:9d:de:21:
15:0a:6b:38:21:3e:f9:01:e1:bd:38:da:aa:be:20:
23:7e:15:dd:fb:70:60:fa:fe:78:ea:0a:b7:6e:f4:
50:9e:ba:82:74:3c:f5:16:c6:64:1e:28:b8:bc:db:
bd:89:5f:e6:85:54:ee:75:e9:16:7e:5a:64:24:32:
f0:89:02:05:47:ac:c7:80:11:81:3e:cf:0a:6a:a3:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:f380::/32
Signature Algorithm: sha256WithRSAEncryption
89:d3:56:c5:1a:64:0d:07:0b:1c:5e:78:cb:cd:3e:f3:44:70:
35:f1:99:b7:38:cc:9c:4f:97:84:91:b7:4d:ee:2d:b9:a8:d6:
c4:6e:fd:86:31:db:6a:d4:9b:1f:7d:47:f3:0d:a4:be:6c:7d:
e7:eb:80:f2:5f:27:d1:06:63:5d:84:45:52:dd:52:43:be:f5:
ea:8b:f4:35:a5:b0:21:5f:1c:8c:a7:82:f4:a8:0a:35:a1:85:
78:ed:27:79:2d:88:58:fb:27:01:6a:a1:62:5b:cc:70:e0:4e:
8c:3a:fa:da:e9:d0:83:a0:e5:87:9d:ba:e7:95:4b:3a:75:20:
3d:b7:25:aa:3d:80:d5:59:4e:d7:50:3d:e5:e6:bb:16:f9:9a:
1b:30:a9:f4:75:99:3d:93:f8:aa:02:67:b3:2e:2c:6f:f4:e7:
92:2b:4e:89:8c:61:5c:52:f5:79:c3:35:78:aa:dd:b9:c7:47:
7c:24:86:7f:68:1f:c8:c7:69:18:cb:70:82:1d:0b:b6:52:d2:
95:2f:d2:26:42:0c:ed:b0:a9:da:13:8d:8e:ec:d2:78:00:d6:
f3:f2:b4:bb:a5:0e:c4:98:e7:d1:78:f9:24:27:4c:81:77:30:
85:51:1f:a6:b7:62:cb:e2:5f:24:df:b8:6c:a6:a0:a9:5d:20:
6d:d8:a1:e6
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAeiFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQwMjAyNTcxNloXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzY1MDQxMTAvBgNVBAUTKDBFNDREMTlCN0M5NTg5QjIzNDJEMDUx
RUIwOTQ0OTM3NDhERUVCNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2vPtryzE4nkKOk3K2IaibGfoSfmej4oF0PEjKG21ffv/RUrr7o3j1fmmbPtMe
xBzDf36D0c3zkaMSzac5hCc6eYA3XiRJh0x1rxPInfh+qwcXvlriHLw7DB9migTq
plS2QNQUhahAb1XdtBlHhAWxkTlqwmicjxi5vExjyy87SS8bSvU/u477IRhmrHfQ
3KrRjFuuFFRTRB1RBKepZR8ZBD372U3KQNfKRO8pvuQTfp3eIRUKazghPvkB4b04
2qq+ICN+Fd37cGD6/njqCrdu9FCeuoJ0PPUWxmQeKLi8272JX+aFVO516RZ+WmQk
MvCJAgVHrMeAEYE+zwpqo8BZAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUDkTRm3yV
ibI0LQUesJRJN0je608wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM2NTA0LzkxRTA2RTg0RUZBNzExRUQ5QjI3MzU2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNjUwNC85MUUwNkU4NEVGQTcxMUVEOUIyNzM1NkVDNEY5QUUwMi9Ea1RSbTN5
VmliSTBMUVVlc0pSSk4wamU2MDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkBfOAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ01bFGmQNBwscXnjL
zT7zRHA18Zm3OMycT5eEkbdN7i25qNbEbv2GMdtq1JsffUfzDaS+bH3n64DyXyfR
BmNdhEVS3VJDvvXqi/Q1pbAhXxyMp4L0qAo1oYV47Sd5LYhY+ycBaqFiW8xw4E6M
Ovra6dCDoOWHnbrnlUs6dSA9tyWqPYDVWU7XUD3l5rsW+ZobMKn0dZk9k/iqAmez
Lixv9OeSK06JjGFcUvV5wzV4qt25x0d8JIZ/aB/Ix2kYy3CCHQu2UtKVL9ImQgzt
sKnaE42O7NJ4ANbz8rS7pQ7EmOfRePkkJ0yBdzCFUR+mt2LL4l8k37hspqCpXSBt
2KHm
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:45 2024 by rpki-client on console-fra.rpki-client.org