Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
File: 0NDWzWh3DDh4O764QbES0FYBdKI.cer (raw, json)
Hash identifier: 7nwy05ZfUHJ9V1u8wlQ9KMiaDOEPQL3YlXPlCdj8vsw=
Subject key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D62F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jan 2024 22:04:03 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.125.144.0/22
IP: 2403:f5c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 20:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120367 (0x1d62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 2 22:04:03 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:bc:c3:63:48:f7:02:1c:83:b8:d6:2c:93:
bc:5a:fb:91:d3:49:1b:35:1a:a6:a5:40:0c:e4:68:
ab:e6:6c:fb:d9:1a:dd:38:58:03:ae:f8:7d:26:2d:
b0:87:0b:29:dc:55:ec:39:82:20:ea:da:4d:a0:b6:
ef:de:f3:e7:59:09:e2:a7:68:71:86:75:96:c3:4a:
87:97:04:63:6b:a3:77:fd:5f:59:c0:91:76:5f:b0:
91:36:7d:fc:64:6a:98:f8:b4:41:6e:b0:fa:bd:67:
0f:2a:06:5e:7c:72:4b:8d:b8:f1:47:14:73:58:0c:
01:73:3f:9b:42:53:f9:4c:e3:c1:01:4b:92:83:97:
7d:b8:9d:35:a2:cc:60:35:8e:d4:60:53:9e:5b:b5:
29:25:d6:93:4f:f0:7d:0d:ec:11:1e:a8:30:23:fb:
27:69:1a:e5:f2:3a:56:d1:a6:f1:4e:32:60:1f:57:
54:b9:2d:f6:93:6a:09:88:c5:32:96:9e:22:83:52:
1c:0d:af:43:ce:52:65:20:9a:8e:18:3c:d2:e2:b1:
7c:a1:69:f5:93:2b:20:48:eb:c4:26:b4:66:12:11:
7a:a6:e8:bf:12:81:5c:c3:0d:56:df:f3:2b:a6:55:
60:ac:f4:f0:70:79:56:89:7b:93:d2:91:20:eb:78:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.144.0/22
IPv6:
2403:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:ee:57:27:b8:67:66:02:29:26:11:80:45:05:0f:58:da:7e:
9c:84:48:94:a7:04:fd:62:cd:64:5f:fd:12:0b:c8:fd:f0:67:
cb:06:c7:74:5c:dc:8b:78:78:22:87:0f:50:4f:7d:aa:14:5e:
a3:10:c1:55:1f:1f:12:91:7e:24:19:c0:ef:14:80:0d:e1:7d:
af:35:66:8d:1c:78:8d:1f:93:d5:50:4f:4d:de:e0:13:91:c7:
96:e4:33:2b:55:d1:5f:13:95:59:b9:97:08:7e:83:e9:d6:c4:
de:19:76:af:1c:f2:61:4e:1a:ca:a1:69:a0:46:0b:5a:d0:5b:
20:92:3c:23:b4:47:0b:91:c2:ba:8e:d0:f4:5e:e8:c0:ba:dd:
c6:32:bd:bd:93:74:29:73:46:f5:1f:2f:41:65:17:ad:61:6c:
ad:ed:d8:36:6a:5c:dd:ee:02:00:32:83:5f:84:98:62:5c:d1:
96:d9:c6:87:8b:69:c8:1d:b9:eb:6b:59:29:2b:6a:06:e8:56:
dd:cd:e0:11:4f:ff:fd:e2:94:62:74:29:91:5f:f2:85:fd:99:
53:13:a1:0e:ae:b7:b2:98:3f:7a:9d:61:89:e3:16:0b:e3:f4:
15:54:00:68:11:f8:32:23:70:7a:63:d3:1d:30:25:11:29:cd:
f0:86:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:33:55 2024 by rpki-client on console-fra.rpki-client.org