Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
File: L927RfNPJhkzrCt9Z6xz05Op0WQ.cer (raw, json)
Hash identifier: icTw1F9Kc0Dj90ig/3vCkXGQCaqbd0oxVUuotT4wPII=
Subject key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC67
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Nov 2023 03:01:50 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 2001:df4:d080::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117863 (0x1cc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 23 03:01:50 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:3a:04:23:98:26:08:33:7b:7e:ce:36:23:
5f:76:e1:3a:f8:c4:01:00:ed:6e:cf:de:a5:dc:9c:
a2:91:a8:e5:0f:7c:1d:93:a9:19:c0:00:e8:0f:32:
cd:e9:b9:5c:c0:84:90:06:52:60:28:2b:b8:8f:0a:
20:bc:fe:17:3f:84:b3:51:a1:47:1e:83:f3:a5:b8:
3c:42:76:c6:89:54:c0:0b:b6:d5:53:07:e1:f5:79:
0d:ca:d0:ce:49:63:22:dd:e9:b3:0c:56:e0:74:81:
8c:e4:69:89:12:bc:93:1b:be:d7:8b:f4:0e:44:61:
e2:ec:d4:30:b2:0e:0e:e0:04:29:cd:fc:dc:ff:a0:
6f:13:8e:98:b6:0a:4e:36:c1:81:eb:20:de:48:57:
d1:07:45:73:b8:89:e1:28:b9:37:72:5c:37:7c:25:
2a:c1:d5:db:b0:b8:97:b9:a6:a2:06:a4:df:64:2f:
1b:30:0e:dc:99:e1:c5:e1:a8:f5:b8:32:63:fa:1c:
20:f6:55:a8:25:99:9a:07:37:85:ff:f0:d6:bb:96:
0c:1a:7c:3d:1a:cc:f5:61:4e:4c:8c:b3:23:95:05:
fa:22:86:1c:23:66:17:2a:f3:2a:49:7d:a9:95:14:
b3:d9:d7:46:3c:22:5c:8f:66:15:3e:98:2f:53:4a:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d080::/47
Signature Algorithm: sha256WithRSAEncryption
96:86:16:f2:64:f6:1c:85:42:0e:30:f7:f6:70:3c:be:a7:3b:
27:6e:30:1e:b1:c3:aa:7c:18:06:bc:ab:b5:01:9c:86:35:60:
46:c8:ba:a9:dc:d6:25:37:3b:3c:ad:87:47:68:e9:77:6e:d4:
b0:2a:e1:8a:79:fb:ee:ea:0d:95:a1:db:67:0a:d0:76:6b:bf:
0a:8c:f6:0e:86:71:3b:dc:58:f2:f0:8b:de:e6:1e:cd:d6:ee:
72:73:15:c8:9f:fa:13:ac:be:7c:29:56:15:7b:9f:2c:21:7c:
f0:d9:70:02:42:3e:ef:72:af:88:3a:4d:52:7b:53:47:41:19:
6d:19:d6:2b:ca:7b:ee:fb:8c:88:ea:4b:ed:99:f6:2d:06:dd:
18:08:91:73:a8:0a:ce:f4:26:ed:72:73:ef:60:41:6f:70:fb:
0f:1a:ee:2a:bf:90:1b:43:72:0f:fa:62:53:03:d1:ae:f3:8e:
38:e3:06:71:c4:13:a5:1c:46:8e:7e:7d:19:80:16:a6:de:53:
ca:d3:07:a9:53:b7:d7:e8:f2:8a:f1:13:31:24:77:a0:76:26:
00:a3:96:60:1b:b4:bb:e9:c3:46:ac:42:2a:17:4f:50:3d:12:
c3:73:2a:56:3a:c0:13:7d:5f:ac:0b:c9:0f:5c:ab:00:98:23:
5b:f8:91:b6
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIDAcxnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyMzAzMDE1MFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3
RDY3QUM3M0QzOTNBOUQxNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdtjoEI5gmCDN7fs42I1924Tr4xAEA7W7P3qXcnKKRqOUPfB2TqRnAAOgPMs3p
uVzAhJAGUmAoK7iPCiC8/hc/hLNRoUceg/OluDxCdsaJVMALttVTB+H1eQ3K0M5J
YyLd6bMMVuB0gYzkaYkSvJMbvteL9A5EYeLs1DCyDg7gBCnN/Nz/oG8Tjpi2Ck42
wYHrIN5IV9EHRXO4ieEouTdyXDd8JSrB1duwuJe5pqIGpN9kLxswDtyZ4cXhqPW4
MmP6HCD2VaglmZoHN4X/8Na7lgwafD0azPVhTkyMsyOVBfoihhwjZhcq8ypJfamV
FLPZ10Y8IlyPZhU+mC9TSsTfAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQUL927RfNP
JhkzrCt9Z6xz05Op0WQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFQ0IwLzYxODY3MzJDQjkyMTExRUNCREZGRjY1M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZO
UEpoa3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwEgAQ300IAwDQYJKoZIhvcNAQELBQADggEBAJaGFvJk9hyFQg4w
9/ZwPL6nOyduMB6xw6p8GAa8q7UBnIY1YEbIuqnc1iU3Ozyth0do6Xdu1LAq4Yp5
++7qDZWh22cK0HZrvwqM9g6GcTvcWPLwi97mHs3W7nJzFcif+hOsvnwpVhV7nywh
fPDZcAJCPu9yr4g6TVJ7U0dBGW0Z1ivKe+77jIjqS+2Z9i0G3RgIkXOoCs70Ju1y
c+9gQW9w+w8a7iq/kBtDcg/6YlMD0a7zjjjjBnHEE6UcRo5+fRmAFqbeU8rTB6lT
t9fo8orxEzEkd6B2JgCjlmAbtLvpw0asQioXT1A9EsNzKlY6wBN9X6wLyQ9cqwCY
I1v4kbY=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:52 2024 by rpki-client on console-ams.rpki-client.org