Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.cer (raw, json)
Hash identifier: eGlWrSwfQ/a6JoYclf6zNdDm/8ZNREjuzZ8n+pEKHjU=
Subject key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 019500
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Apr 2023 05:34:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.114.116.0/22
IP: 103.53.196.0/22
IP: 2402:2f80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103680 (0x19500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 05:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:ae:2a:3a:d9:b4:ae:84:1f:a0:94:fd:f1:
ec:21:f6:4c:18:bf:4d:65:98:5d:08:8e:06:3c:22:
ec:31:50:39:f8:15:29:6c:46:4e:6b:38:18:e0:c7:
0e:2f:50:22:70:c0:3d:fb:73:60:f4:85:17:aa:79:
2f:0f:23:39:2f:c2:a4:c1:17:37:7c:0d:96:dc:5d:
65:9b:7a:c1:03:aa:c8:f2:2e:64:61:d5:9f:9c:26:
bf:4a:18:79:a4:29:50:cb:dc:59:85:f7:e6:10:54:
72:d8:26:d5:90:d7:eb:7d:04:9c:22:91:19:c0:20:
6c:1b:59:f7:89:1c:3d:28:8d:4e:86:0c:e5:e3:8c:
24:07:a6:fd:bd:44:8e:46:fb:cc:bf:56:26:9c:61:
e1:86:11:42:8a:ae:23:dc:b4:4a:34:39:ab:34:60:
15:13:f9:bf:f2:86:b9:48:6d:c7:ea:a7:4a:24:ff:
b4:69:16:36:68:9a:7f:5d:f5:45:22:7e:7a:df:49:
ad:3e:12:6c:7e:58:d9:8b:00:a8:dc:70:5f:25:7e:
b7:15:d7:9f:6e:5b:04:35:92:86:79:d7:ec:ae:48:
37:9f:77:bf:b8:f7:50:b0:7e:a7:4f:e3:31:29:be:
f2:4e:06:87:0b:80:ce:c7:a4:4e:3d:20:01:d6:09:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.116.0/22
103.53.196.0/22
IPv6:
2402:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
6d:d5:9a:09:d4:9b:da:58:33:15:a2:ed:6a:36:bf:4b:40:f8:
f4:c0:41:f2:a5:bd:6c:78:81:a7:0b:51:15:d2:e9:a9:2e:a1:
72:00:d6:0c:68:79:ee:6c:46:90:20:eb:c3:e8:e0:e8:e4:d0:
f6:ad:53:0b:ee:b6:e6:8e:5b:68:34:e6:85:fc:2c:e9:a2:eb:
73:33:56:bb:57:00:f7:d9:2b:b2:17:a4:71:61:f7:dc:bc:01:
07:85:e8:a1:80:29:d1:12:4f:f6:9a:bc:85:02:d9:fc:01:44:
7b:07:bb:77:1d:9f:5f:cc:89:79:35:32:99:67:e2:4a:cc:fc:
be:b0:46:b1:1f:65:32:62:c1:27:46:be:67:a9:ca:5b:4d:2a:
38:db:5d:07:cf:ea:86:64:be:b0:9e:5e:f7:90:34:4a:a3:72:
50:b6:98:91:fd:ea:9d:ed:39:27:ea:32:3d:3c:1b:20:bf:3c:
3d:26:30:ea:6f:83:bb:de:80:0a:b0:10:20:6b:23:82:d4:42:
ec:33:f3:c2:aa:7a:e1:4f:17:db:3a:6d:37:0d:d4:9b:d7:00:
43:4e:a2:b5:f9:75:33:c5:0e:d0:48:15:95:70:d4:19:ae:fc:
75:a2:e3:19:d7:f3:b9:1d:ce:91:7c:1e:e0:1a:56:0e:35:c0:
62:f7:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:42:54 2024 by rpki-client on console-fra.rpki-client.org