Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMswK1yuUoA5N0i--FumeosuQ-M.cer
File: DMswK1yuUoA5N0i--FumeosuQ-M.cer (raw, json)
Hash identifier: iOeFOO3SZ6Am53+JX1m6JV6je8crJu17WrXJTCk/xpI=
Subject key identifier: 0C:CB:30:2B:5C:AE:52:80:39:37:48:BE:F8:5B:A6:7A:8B:2E:43:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EE56
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/DMswK1yuUoA5N0i--FumeosuQ-M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Apr 2024 04:38:43 +0000
Certificate not after: Thu 29 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 135115
IP: 2400:f9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126550 (0x1ee56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 04:38:43 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=A91BE7CC/serialNumber=0CCB302B5CAE5280393748BEF85BA67A8B2E43E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:80:6d:94:ea:b9:88:c5:b0:b7:46:46:58:
19:4c:37:5d:50:1a:a7:d2:86:15:32:9a:73:27:11:
05:e3:17:90:2f:cd:6d:92:da:2f:3e:6b:63:5a:c5:
39:c2:ac:4a:ac:1d:cd:03:1c:68:3d:85:7d:c6:c6:
6c:18:81:32:9d:55:07:85:69:d3:16:86:0d:ae:c3:
f7:b5:d8:d7:ee:19:8d:da:92:0b:cd:c4:f9:89:3d:
4f:64:22:9d:3e:3e:bd:d3:6f:2d:1d:fb:5c:9c:b3:
90:5d:c4:c4:b2:e6:60:82:04:07:6f:e9:ae:80:c8:
97:04:78:32:00:73:aa:14:e2:74:03:5c:53:7b:d9:
48:5a:8d:84:a4:d5:ab:23:11:8d:7f:05:b6:fc:2b:
c3:64:b0:80:15:7c:f8:24:07:8e:a8:de:57:1a:48:
46:bc:6c:f6:27:8a:c3:5b:a7:1f:2a:16:03:cb:79:
d9:6c:39:5a:03:04:a8:91:3a:c6:60:21:68:68:e5:
85:50:8b:22:35:ef:4e:34:b8:d4:24:4b:13:06:d6:
f4:fe:3f:27:91:85:16:1f:9d:07:48:53:26:e3:b9:
e3:27:10:7b:be:51:d6:fa:47:20:d0:1b:c7:e5:de:
01:ab:bb:4d:4b:3e:d7:14:b0:0b:0d:a3:47:29:1a:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:30:2B:5C:AE:52:80:39:37:48:BE:F8:5B:A6:7A:8B:2E:43:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/DMswK1yuUoA5N0i--FumeosuQ-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135115
sbgp-ipAddrBlock: critical
IPv6:
2400:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:88:ac:da:85:ff:64:2e:7d:56:fe:bc:f8:e6:a1:5e:be:b2:
eb:ef:7a:fc:e0:b6:18:0b:56:f7:54:77:f7:10:cc:0c:a5:1a:
68:25:13:b0:ef:67:33:08:ec:5d:d8:5b:73:49:8b:23:08:87:
f4:d5:d8:84:cd:54:05:fc:43:2d:22:21:41:f8:43:3b:96:f6:
62:8f:c5:a5:c8:ef:5f:db:0b:e3:93:25:ad:06:4f:b0:14:9c:
a5:cf:aa:61:68:c6:c1:40:2e:e2:9e:59:f8:69:27:f1:b8:eb:
fe:90:9c:ac:2d:f5:6b:4e:6e:67:33:87:be:59:95:99:48:6a:
a0:a3:84:ac:da:66:41:46:7d:62:c9:36:93:75:6a:84:50:24:
59:2b:ec:2b:34:b9:b8:33:1d:62:ad:50:61:82:84:12:14:88:
58:74:c1:9a:0c:dd:c5:7a:fb:14:ff:70:e4:1e:68:3e:f8:39:
cd:fd:90:34:cf:a1:85:86:99:50:93:f6:26:05:23:d1:e6:43:
b4:9c:28:48:b5:8a:54:20:b6:02:21:da:71:27:f1:00:d6:2a:
8e:2d:2d:60:3a:7f:62:33:d2:d8:2c:d5:b8:86:7d:2f:41:67:
f7:08:89:ae:ff:04:49:fa:94:e7:8e:36:92:69:0f:09:5b:93:
e7:e3:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:42:45 2024 by rpki-client on console-fra.rpki-client.org