Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer (raw, json)
Hash identifier: /+kB/6LILeBTwxYA8SbpyJ4oOfGrJnMZFIktcG3wda0=
Subject key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E853
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Apr 2024 19:21:08 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 203.27.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125011 (0x1e853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 19:21:08 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ee:2f:16:c0:b2:68:50:a5:31:6a:81:cf:
33:b4:05:7c:3a:23:08:ad:79:00:76:27:8a:ad:f8:
9a:43:0c:01:a9:9d:7e:44:3d:19:a2:5c:61:70:65:
e1:2d:67:18:91:5a:0c:33:cd:8c:35:9e:5b:d1:dd:
80:63:df:2b:30:e4:2b:fc:ea:58:a1:81:18:6d:fa:
0d:6e:8e:1e:45:ca:89:29:97:ab:6e:01:16:0f:e1:
22:0f:f5:f4:17:b7:79:88:b9:0b:f2:df:65:e5:6d:
06:b4:d8:25:4c:37:b2:19:8c:09:86:b4:ae:e5:22:
9e:bf:7a:64:f8:e0:17:b4:a2:32:3c:3f:97:38:53:
50:db:ed:42:10:53:cb:76:de:aa:bf:6e:92:f6:eb:
22:23:9a:50:ee:70:99:be:1d:75:43:30:fb:0d:fb:
8a:4a:14:c0:35:15:f7:e4:64:7b:f6:2d:9a:c4:76:
f8:51:43:e3:9f:54:14:63:dc:25:99:15:70:33:69:
77:be:83:65:69:8a:42:ec:63:03:80:55:79:10:24:
7a:61:12:9e:9c:4d:a7:01:4e:b3:b3:3f:40:71:c0:
92:79:9b:f6:c3:2c:a1:11:c9:b0:ed:5f:e1:22:3f:
92:4a:59:ab:1b:25:03:6a:0e:fe:e7:ef:01:c3:65:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.27.114.0/23
Signature Algorithm: sha256WithRSAEncryption
82:16:92:bf:5d:6e:57:2e:4c:f4:49:a7:5c:54:6b:1c:d1:e4:
2a:4b:06:e2:63:65:6f:45:56:64:30:4c:a6:34:6b:ec:ae:f2:
33:91:9f:d6:ce:01:6e:d6:80:86:35:fb:c9:84:7e:3e:69:13:
37:ea:f4:e7:92:5c:01:a5:c4:8a:b5:d6:75:45:35:9c:05:49:
64:72:ab:d2:ba:4d:ef:37:0e:84:ee:9f:d7:55:4c:7d:40:63:
cd:cd:0b:61:e3:94:b1:3f:3c:fe:a2:d6:f1:a2:fa:3f:5b:fc:
1b:7b:4b:9f:72:b0:13:75:96:fa:70:b5:b7:7f:e9:58:10:96:
1d:59:64:6e:28:70:b7:f3:f6:28:5a:9c:27:50:4a:ac:c2:f2:
8a:b8:e6:02:33:38:a6:a0:c3:f9:23:4b:7c:a1:2c:2e:3b:a7:
b5:cb:f8:3f:54:b3:65:e3:cd:bd:be:75:16:66:ba:ed:06:90:
00:fd:67:b8:9d:9b:d2:90:25:12:78:c9:53:85:c0:8f:fd:5f:
26:76:bf:b1:09:a1:5b:9f:94:d3:bb:50:0e:3e:02:33:f9:9d:
b2:1a:3f:18:e5:d2:f5:2a:ff:be:fd:73:d4:b7:1c:48:05:fc:
c9:d1:a5:58:55:34:71:4d:89:8d:91:6c:f9:bc:7f:02:04:41:
50:a9:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:36 2024 by rpki-client on console-ams.rpki-client.org