Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.cer (raw, json)
Hash identifier: SsdJea0CEP15wqhbcQnb3lsVH+mDVWI0L/koUuMIf3U=
Subject key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC6B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Nov 2023 03:38:26 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 38286
IP: 122.252.176.0/21
IP: 2401:cb00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117867 (0x1cc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 23 03:38:26 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:e7:72:5a:1f:91:5a:e8:8e:86:89:f3:2a:
ea:ea:e7:23:fb:65:0d:7a:56:dc:df:ce:23:09:cf:
ff:ed:b8:55:24:31:d0:ce:44:ba:29:75:05:ab:db:
62:35:5d:a1:78:22:d4:09:db:ee:ae:de:aa:ae:b4:
06:9d:ec:22:5f:c6:63:4e:0c:52:6b:c5:c2:14:1e:
4c:72:97:4e:51:16:72:66:66:68:66:a5:2f:92:a5:
03:1e:55:68:30:c8:ba:61:0e:6a:98:4e:48:15:cd:
53:1b:af:c3:96:a5:e6:21:a4:b3:8f:4f:b3:7e:14:
a2:e5:eb:8a:c1:71:26:3c:64:6e:22:96:e8:81:0c:
1c:5d:ae:40:ab:9b:cb:c5:cb:b5:12:ba:47:72:72:
d1:91:06:ae:7a:95:b1:a8:8e:b1:5c:3e:a9:89:43:
33:ea:14:da:4f:b6:a9:32:d3:7e:0f:20:7d:af:43:
d2:38:33:72:84:48:91:40:dd:e4:12:7b:68:97:3f:
98:78:5a:3b:7a:1a:09:c8:47:85:59:6c:d8:ee:42:
cc:8b:42:f3:cb:32:bf:52:7a:f3:61:19:04:a6:98:
e3:06:57:7c:00:42:23:10:97:8a:17:a8:1e:3d:c9:
21:4f:1d:04:bc:9c:1d:aa:98:18:2f:f8:65:90:ed:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38286
sbgp-ipAddrBlock: critical
IPv4:
122.252.176.0/21
IPv6:
2401:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
16:f4:96:f0:b3:d4:84:01:94:b3:75:9c:c7:05:33:8b:b0:f7:
85:58:6e:76:0b:e7:0a:13:a1:4e:f9:2c:22:c1:65:69:a7:62:
96:86:06:e7:0a:9e:19:44:77:b1:35:e0:14:3b:f1:70:84:af:
07:02:c5:0d:51:de:a9:8f:79:5f:de:12:96:2d:26:1b:74:77:
f4:ec:84:03:d9:81:52:d6:dc:19:bc:00:8c:39:04:f0:ce:f9:
ed:31:a0:51:22:76:ce:54:ad:40:77:7a:70:bc:a2:69:9b:47:
c6:40:26:84:f5:04:bc:d2:e7:52:ab:3f:92:9a:10:ba:25:30:
a6:33:5b:7c:02:55:c4:18:e8:f3:77:28:78:fe:0c:3a:0c:0b:
94:dd:fa:0d:e1:d5:c8:c1:93:92:f7:d6:23:fd:f6:a3:f1:87:
c5:39:80:46:b6:f9:f2:d4:ea:3e:c2:52:f7:00:54:12:89:a2:
b7:60:32:58:1e:db:f1:14:45:52:a3:82:55:e6:69:c3:d8:57:
ee:63:77:65:5f:ab:8c:3f:a6:46:d1:6a:ba:74:1a:0d:df:b7:
cb:2f:a0:76:c7:23:f0:b8:f2:f2:05:2a:0b:7e:38:2a:f6:44:
70:f8:03:41:74:1e:54:f2:e1:28:bc:b2:8f:eb:0e:b6:6a:02:
c0:8c:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:42:42 2024 by rpki-client on console-fra.rpki-client.org