Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.cer (raw, json)
Hash identifier: yYc8Wuk5CM8zElJeJZHlxCBwNYmeaJDUZ1/7e9t4gIo=
Subject key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D781
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jan 2024 16:29:38 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 43.228.156.0/22
IP: 103.47.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120705 (0x1d781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 9 16:29:38 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:33:e3:46:44:d7:0c:98:1c:de:78:48:23:
f0:6b:a5:9e:d1:76:5e:d9:3a:a9:de:82:f8:29:a5:
b7:b4:4a:ed:af:a7:51:2f:61:ed:9c:6e:c3:51:71:
6f:46:36:9a:3c:39:6f:0e:a4:77:6b:e8:30:9c:f1:
85:f7:50:5e:5f:d8:5f:af:e0:d9:99:bd:b1:85:4e:
08:a7:be:2c:d0:1a:0a:51:d1:06:93:82:2b:1c:9a:
6b:01:7f:61:e5:61:78:12:8e:94:91:81:e6:0c:fd:
18:d2:89:4a:6e:0b:fb:a9:8d:e2:44:e9:4b:e9:8d:
52:a9:77:e1:bd:be:60:a8:54:df:60:79:50:f0:58:
61:98:c9:15:d7:db:98:fe:77:9a:0c:54:13:80:78:
73:19:6b:77:cc:7d:b9:8e:6d:32:dd:fa:3d:1d:ec:
e5:47:b5:83:71:4a:7f:98:07:95:4b:cf:bb:e6:14:
90:d3:28:52:e0:f6:5e:33:d9:42:47:78:1a:61:86:
ba:b2:b5:2a:df:3d:34:a6:9b:2a:10:72:4a:72:ad:
66:6b:1d:cc:41:e6:5d:03:f7:01:13:ca:dc:c3:92:
8f:35:6f:ba:f3:03:8b:95:95:55:69:d1:2c:c6:ab:
81:aa:3d:e0:e6:43:2d:54:77:fd:09:06:de:fa:f6:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.156.0/22
103.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d2:79:fa:cd:ce:21:c7:9b:ce:7f:44:50:3e:70:3f:28:42:
11:9e:ce:d7:c3:e0:5d:3d:bc:b7:32:7e:3e:11:a9:ce:a3:19:
6b:8f:a2:dd:d6:3c:ab:7c:54:51:71:0e:26:88:72:18:b4:45:
31:e8:d5:54:72:b0:c6:35:6d:e3:e6:00:4e:7b:e5:35:61:0f:
e0:16:30:fa:ec:8c:35:15:11:91:2c:5c:79:00:19:8a:65:d7:
2d:64:b1:b3:06:f5:11:aa:59:79:8a:2e:d6:c5:a8:b2:1a:a6:
5e:55:a4:83:70:33:da:b8:10:0f:f5:09:16:92:d2:4e:7a:b0:
e0:d2:14:01:85:d1:b6:0e:fb:5a:84:17:07:fd:11:d0:46:fe:
07:7d:70:61:32:61:e9:72:ba:3c:1d:29:8e:c0:c8:91:50:fc:
dc:07:68:df:9e:f6:4c:13:31:d3:ca:67:b2:95:72:30:5f:23:
75:1d:56:47:d1:25:00:12:8a:c6:bf:5f:61:ef:f1:3e:ff:95:
bb:e9:f6:b8:5e:d7:e7:4c:c5:41:d0:41:69:20:57:fe:e6:72:
73:b9:d5:9f:82:34:3f:d9:cc:bb:ef:4a:5c:fd:40:c5:a0:a7:
f9:42:50:f4:00:22:9f:b6:e9:2e:bb:e4:a4:e3:7a:03:ba:98:
18:5c:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:12 2024 by rpki-client on console-ams.rpki-client.org