Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
File: RmieTZ937kzGyKiOZ57P7zdS9Dc.cer (raw, json)
Hash identifier: GC1MJRQ0yAFXvT/oqS7XOqNAcURMBoRqxyExfuv0j5o=
Subject key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E7BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 31 Mar 2024 19:55:19 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 45118
IP: 202.158.253.0 -- 202.158.255.255
IP: 203.100.61.0/24
IP: 2405:8c40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124858 (0x1e7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 19:55:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:35:4f:56:26:6b:c7:8f:b1:aa:83:7d:05:
8e:aa:cd:27:82:60:b7:25:a7:90:ae:4b:24:1a:76:
aa:64:54:6d:a4:f6:37:f5:70:bd:19:b1:da:44:dc:
05:a6:7b:9a:ba:8b:b5:77:59:23:11:18:6a:d0:17:
76:a7:c1:64:30:de:31:49:e0:d0:e6:6a:6d:b9:6f:
0c:6c:7e:b5:d4:93:b2:fb:e8:3a:74:54:60:06:c2:
1d:90:1b:2a:c6:c1:3a:70:6c:d9:dd:0e:8d:51:52:
72:62:9e:61:2f:c9:1d:42:dd:50:ca:9c:2b:d7:27:
4f:ba:71:47:1d:ab:75:82:4b:69:d2:ac:bc:02:78:
a7:b8:18:f4:c6:b7:1a:5e:54:ba:7f:df:9e:f9:8a:
d4:65:a7:14:50:8c:5d:05:fc:49:17:05:53:22:b3:
c3:81:2b:8d:3b:03:48:f1:3b:db:6e:08:b7:96:31:
5c:67:b4:9d:2d:16:19:49:d6:48:ba:2c:78:0e:f3:
aa:67:7a:b5:d6:7d:78:61:a8:9b:3f:ce:2d:b3:93:
c9:d4:36:25:c9:29:ae:a3:90:34:e4:cc:c6:a0:2e:
e6:eb:4e:89:8b:f8:86:e8:76:07:72:0f:86:88:88:
03:8e:b5:cd:39:db:97:0b:ec:a1:95:27:d6:be:b8:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45118
sbgp-ipAddrBlock: critical
IPv4:
202.158.253.0-202.158.255.255
203.100.61.0/24
IPv6:
2405:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
81:a3:e1:17:a2:2a:a2:0e:6e:71:6f:4d:e7:94:40:7a:81:47:
07:c1:01:e6:b6:2b:63:91:16:2d:fe:68:f8:a0:ac:c2:a8:14:
08:c8:d7:e3:8b:2d:59:85:1e:81:41:12:c9:0b:ae:90:52:69:
13:29:ac:13:26:27:26:33:35:13:1e:32:c8:9b:f2:cf:70:bb:
91:7e:47:4a:af:83:f2:ef:fc:4e:1b:0d:a3:b3:e1:e1:9b:05:
53:97:5b:b2:5c:60:cd:6a:d1:58:e9:d0:95:87:9a:8b:47:dc:
f2:53:c1:6d:b0:52:cf:a2:6e:ab:85:09:e8:17:64:31:74:fb:
3c:9d:46:51:e5:e1:60:87:6e:9f:ec:30:3c:7b:3b:cd:3a:09:
d7:05:12:c4:00:25:72:ab:cb:ee:7b:6b:39:a4:17:b9:98:be:
83:9c:1f:53:a6:54:f9:42:ef:77:7a:ac:a4:74:6c:de:4d:f2:
dc:71:56:6e:d0:90:ad:1f:63:8f:7a:60:81:bd:a4:7e:f7:77:
d9:ca:bf:6d:4b:9c:da:3b:2e:c7:33:ea:4b:f9:78:c7:4b:07:
37:1c:4c:22:29:84:ca:87:e5:31:af:68:cd:75:dc:1d:02:37:
a3:ac:d0:bb:98:e8:38:ed:d0:7b:39:13:a3:a9:5a:c0:60:ca:
21:87:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:28 2024 by rpki-client on console-ams.rpki-client.org