Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.cer (raw, json)
Hash identifier: EfN5ggJxfB/qtbMAVzsQ3L5+g7xe0NIDPyrWkYNIpB0=
Subject key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD17
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 18:34:13 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 45164
IP: 202.36.163.0/24
IP: 202.49.72.0/22
IP: 2001:df5:b000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118039 (0x1cd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 18:34:13 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:6d:14:52:49:5d:df:ab:5c:af:d6:4a:4e:
8c:21:05:d5:1d:07:af:cf:2f:7d:79:8c:4a:7c:e5:
85:fa:51:7c:ee:f4:83:44:f0:ff:10:4e:47:37:bd:
2c:6c:08:d5:07:81:4d:14:3c:79:b4:61:ae:25:e6:
9b:67:34:47:5d:54:48:cf:d2:3f:77:2b:26:b8:ee:
ab:40:36:d7:7b:6a:68:9e:6e:8c:2e:db:42:00:ea:
84:cc:c5:c7:b1:eb:ff:36:bc:8d:65:79:6a:ac:53:
6c:31:0c:a7:0a:18:5d:db:52:dd:fc:7e:bc:f9:3c:
ef:c8:fa:95:71:f5:04:b4:3e:80:01:cb:eb:0d:a5:
11:b5:41:fd:c5:74:2b:05:e5:51:35:6c:67:11:63:
ae:c7:50:d3:ca:31:78:5a:1e:92:e2:1b:44:c2:8d:
ff:d1:fd:4f:cc:3e:f1:c7:f9:0c:d2:5d:ea:6e:16:
ce:c1:6b:86:08:d3:dd:b3:33:39:e4:e3:00:4f:8f:
9c:77:23:3e:10:0b:b7:2f:1a:dd:bb:9f:f8:cc:64:
eb:d5:34:66:c7:2a:98:f8:0f:ce:85:2f:94:34:cd:
77:ad:cb:03:f7:ca:65:b6:78:b4:d1:c8:4a:9a:c2:
ad:6e:cd:c6:21:16:f6:64:78:67:cf:47:6e:fe:79:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45164
sbgp-ipAddrBlock: critical
IPv4:
202.36.163.0/24
202.49.72.0/22
IPv6:
2001:df5:b000::/48
Signature Algorithm: sha256WithRSAEncryption
04:7d:3e:1b:26:77:3d:c1:74:95:14:c1:e4:65:1b:08:dc:60:
d1:7c:c1:0f:0d:b3:68:70:56:c8:1a:74:5f:f7:dd:2c:69:57:
11:00:c3:46:69:f7:35:07:82:7a:0a:5a:07:bc:b1:10:ab:df:
34:27:96:07:92:e2:73:11:3c:50:c9:a0:05:2b:d3:0d:63:75:
8d:fb:1e:25:4d:f5:c6:6a:78:40:53:12:0e:6e:f3:f9:f4:e6:
c6:a3:dd:00:e9:ae:06:e9:9e:47:22:c2:cc:cc:ef:27:69:d9:
f8:3b:14:f3:2e:34:78:35:6f:63:39:b8:47:84:11:7f:18:d7:
50:30:d9:82:1c:c9:72:53:89:f4:a7:58:bb:49:3e:7c:39:d3:
08:78:99:65:5a:88:54:f5:94:25:3f:b7:12:77:08:f7:ef:fc:
7b:18:ff:26:a6:86:47:c4:cb:37:90:96:3b:c9:af:7c:a8:07:
40:ec:f9:67:44:91:ac:ac:f7:3f:30:25:29:e5:5d:fe:e8:17:
a2:4f:c0:b3:3c:17:bc:8c:34:d1:c2:a7:6b:3f:8f:73:50:4a:
f1:f8:92:5c:cf:ca:21:c8:e1:69:20:4e:47:51:6b:07:3b:21:
a9:e3:cf:f9:75:90:54:26:6e:32:67:08:3d:87:42:79:47:d8:
d3:d8:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:48:01 2024 by rpki-client on console-ams.rpki-client.org