Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer (raw, json)
Hash identifier: iqp8Zg89Rmi9xmyBKfUSaY2AmgCyAxt3j5hVSGE9ZFg=
Subject key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF39
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 May 2024 22:29:01 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.90.172.0/24
IP: 103.97.175.0/24
IP: 103.97.200.0/23
IP: 123.253.224.0/22
IP: 2001:df0:e100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126777 (0x1ef39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 22:29:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:3c:e9:87:8e:b3:5c:dd:e8:bc:4e:76:d4:
10:07:c4:e2:99:4f:73:35:d6:0b:2f:06:38:ac:2b:
88:89:e7:a4:bb:82:43:60:19:44:6f:a1:8c:78:df:
3a:53:36:32:e0:da:09:16:c4:fe:1a:37:f3:d8:76:
d9:e5:50:c4:5c:84:f1:58:63:aa:32:ad:22:ef:da:
5b:94:79:ce:a8:ef:9d:fa:ee:cb:d6:4a:d1:2b:d0:
c7:de:43:09:34:a8:7f:8c:c6:20:7c:04:c3:08:4e:
c7:ef:54:3b:fb:e9:76:99:3d:8a:2b:2c:7f:e1:3e:
66:76:70:a2:fb:cd:9e:66:b8:a4:6b:66:9d:09:14:
74:db:bd:ad:59:ff:04:10:b2:bd:54:dc:e7:da:c7:
9f:87:0e:00:54:c6:77:4a:cd:2e:ec:ea:7a:5f:c5:
2f:9d:2e:07:69:74:77:5a:00:74:5e:57:6e:ca:6a:
47:8c:8c:29:a8:84:88:57:80:04:0c:0f:8a:3b:14:
c3:9b:81:f9:08:72:b6:68:58:05:38:10:60:fa:3a:
12:90:1f:5b:9b:e6:5a:84:71:a9:28:ab:c5:4f:8d:
78:4d:58:7c:54:a3:4f:79:14:40:be:45:63:b6:7b:
6d:10:0e:df:78:bf:2e:19:14:37:82:c2:e0:07:32:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.172.0/24
103.97.175.0/24
103.97.200.0/23
123.253.224.0/22
IPv6:
2001:df0:e100::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ab:48:ab:bd:6c:b8:5d:8a:03:57:5c:31:65:07:bb:54:3d:
2e:d5:c4:26:97:d7:fa:ee:0b:6f:7f:a6:be:65:62:eb:1d:59:
9f:61:c9:06:36:59:08:a6:cb:3d:b3:07:4f:b9:bb:03:b5:b3:
26:e2:54:24:f6:01:db:af:4a:23:80:77:de:3f:79:1e:c8:7d:
23:c2:cb:52:36:f4:bc:84:a3:6a:ce:a5:ea:1d:2b:09:31:fa:
cf:8e:d7:83:64:c3:8a:61:f6:3d:e3:b7:d2:33:ce:63:3b:33:
49:26:cb:19:e0:fd:e6:11:10:78:b7:e1:e5:42:e4:70:98:25:
76:a0:c9:dc:fb:96:d6:3f:65:89:da:5a:13:07:3c:4e:76:ba:
bb:b9:86:43:b5:07:61:9a:d2:70:99:62:f4:b3:cc:03:a6:0c:
54:c7:49:51:b4:e8:23:ac:ef:e1:53:36:76:85:7d:82:2f:8b:
14:bc:0d:12:22:c5:99:7f:76:42:29:ee:a0:bd:f6:bc:48:09:
fb:33:19:38:51:d0:71:d9:b3:80:a9:b0:09:a2:3f:80:71:b5:
c8:03:c7:d4:e2:47:14:d3:64:b0:ec:3a:b0:28:8f:0b:39:71:
97:48:37:6f:38:cd:ba:6f:c2:b8:3e:b9:d3:95:09:69:a3:29:
46:89:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:34 2024 by rpki-client on console-ams.rpki-client.org