Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.cer (raw, json)
Hash identifier: /uYF5G3PSI/JSlvIR1ln08FJkoLlH2mwBH+mAr0RW9I=
Subject key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CAE3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Nov 2023 17:40:57 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 103.77.120.0/22
IP: 2402:a8c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117475 (0x1cae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 14 17:40:57 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:7d:cb:20:03:42:f5:74:45:bb:da:90:4c:
48:4e:1e:b6:51:0d:72:ad:1f:ad:77:d2:ef:5f:2f:
b1:9e:bb:32:00:64:a9:fd:b2:35:5a:3d:2d:26:f5:
d2:57:e1:dd:a2:09:59:3e:ab:c5:f7:14:aa:ac:03:
04:f1:11:b2:01:3f:aa:cd:bc:7d:4a:c2:05:93:1a:
7b:b5:95:45:72:a6:c3:0b:5b:78:b7:62:b3:fd:91:
ce:5b:66:ad:f1:0f:d7:52:f5:20:19:8e:4d:3d:9f:
6c:f2:a3:3d:e7:35:df:a0:b2:c2:e9:44:a0:2d:10:
31:30:b6:9b:50:53:19:03:69:6d:a5:cc:31:ee:87:
71:6f:de:9a:71:88:c7:f8:a7:04:32:b1:e2:4b:53:
1c:5e:50:49:d7:be:ee:e5:9d:45:3a:5d:70:4a:88:
84:91:84:b9:ed:63:11:de:76:0b:87:f6:f0:12:37:
5c:50:e6:26:7c:c1:fd:56:50:43:68:23:81:67:36:
e1:0c:39:8d:d3:76:d3:95:95:13:4b:01:94:2c:11:
19:30:87:ba:90:24:77:bb:36:c2:11:14:34:23:63:
7b:f8:98:af:ab:7b:3e:22:3b:26:93:75:d7:e6:0c:
c4:86:83:f3:6e:53:bc:92:ca:9a:52:7d:4a:e9:06:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.120.0/22
IPv6:
2402:a8c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:51:77:11:b4:41:45:23:f6:27:d8:a5:c9:0f:01:a6:5f:bb:
0c:77:25:a6:8c:72:cc:ab:35:0d:16:40:f1:26:a9:09:ce:3e:
d0:02:c4:b3:b3:26:be:de:fa:6f:b9:6a:68:87:e3:8e:f8:d6:
fe:f9:03:ca:ad:a5:d4:4f:f3:e1:4f:b3:fc:9e:dc:39:88:59:
99:f7:0a:76:bf:d5:b3:27:a6:8c:df:e1:c0:e6:b1:68:39:8c:
8a:48:ac:fb:1a:06:fc:2f:01:61:b0:37:6f:a4:51:c1:3b:51:
47:17:44:db:cf:69:f1:20:40:e2:ca:eb:a1:ad:a6:99:db:e7:
cb:f7:0f:c2:86:aa:a8:e6:fb:7d:66:a8:13:91:15:02:92:10:
eb:3c:e4:3d:a1:4c:a3:40:bc:52:9d:a2:ce:bd:60:9f:10:ab:
1a:2a:28:d9:da:e9:e8:9b:53:15:6b:c7:65:3d:b5:bc:4b:de:
58:8e:1a:6a:a4:32:00:25:1d:b9:82:14:e1:4c:75:06:9b:eb:
17:dc:af:27:ff:70:93:e0:35:0c:8f:33:8b:5d:31:28:cf:66:
42:07:79:3b:c6:0c:5c:01:09:c2:95:bb:46:43:aa:50:b7:2f:
b4:b4:de:15:fe:30:d7:00:56:0b:c9:d9:ea:ca:d4:8b:bf:46:
5d:0a:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:47:55 2024 by rpki-client on console-ams.rpki-client.org