Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
File: eKfTXvnEd150y6PRZrYbdZAkFSM.cer (raw, json)
Hash identifier: gMQaB1/FZTM/Hmw3qiqQsgdeWB7rnG5AVT7VryTkdME=
Subject key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D28
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 23 Nov 2024 11:14:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 137037
IP: 2001:df4:96c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138536 (0x21d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 23 11:14:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:76:4a:af:8f:2b:21:e6:a0:cb:c9:d6:1b:
3e:18:be:b0:12:48:50:38:65:97:1e:0e:15:e9:e1:
ba:3d:06:6a:1f:8e:89:ef:31:5f:ab:48:68:f7:cb:
4d:69:1e:08:a2:53:28:2c:73:56:df:9a:33:4b:3b:
b6:21:af:83:a4:3e:fe:0e:98:fd:9d:e0:3f:5f:d6:
24:d0:73:a3:be:f2:d8:73:81:59:b6:85:7b:92:9a:
e1:8e:89:3f:d7:8b:31:4b:cd:2c:14:c4:e6:1e:15:
d3:84:fc:00:0b:d4:7d:d5:01:5f:b5:a0:45:09:46:
aa:d7:c0:c6:ec:f9:29:28:32:78:33:e6:f2:f2:82:
ba:36:e9:58:1c:f2:2b:60:07:f3:ab:6d:4f:f1:8a:
10:56:5d:ff:51:4f:70:6c:17:aa:80:20:50:04:e1:
61:7a:9c:d4:86:b8:38:e4:b9:80:f7:79:71:c9:cc:
2c:4a:e5:56:d4:0a:c9:bb:f3:4d:60:41:7f:b6:c1:
ce:bb:5b:69:7a:52:4e:3d:3c:af:81:50:9c:45:d3:
87:19:a5:18:e3:c8:fa:d7:16:bc:15:4d:72:a9:59:
c9:f0:d0:c5:58:8b:aa:01:fc:8c:57:84:ce:3e:85:
28:46:0e:1e:22:1b:3c:08:eb:79:6c:ef:a6:9c:90:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137037
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:96c0::/48
Signature Algorithm: sha256WithRSAEncryption
cf:9c:47:08:1c:eb:fb:25:23:25:78:fd:ec:9f:52:b1:9a:2f:
90:72:57:de:f1:fc:b9:ed:c0:28:59:06:d9:c5:a8:9c:c8:a7:
92:de:e8:68:f9:e5:f0:1c:b3:5d:aa:69:cc:b5:4c:54:51:80:
aa:28:76:ee:22:6f:4d:ee:34:9d:18:78:19:6f:b3:3f:71:ad:
07:5f:94:8b:8a:38:e2:83:c3:df:cb:4e:4c:e6:79:2a:30:ee:
92:8e:ad:9f:1e:db:ef:23:3f:e8:b1:81:b0:9d:84:38:1d:7d:
cd:74:6d:fc:2f:08:5a:9c:d9:bd:8b:0c:68:3d:85:7c:cd:68:
c6:dd:47:c9:cb:42:96:81:56:79:4d:99:79:64:91:20:d6:16:
90:f5:ba:10:9d:a0:d9:53:f7:70:cb:90:5b:5f:60:44:06:01:
b0:47:37:40:d5:6d:8f:93:2b:99:5d:cf:de:a1:26:e8:ae:4e:
3c:d2:a3:bf:e0:40:0a:a3:18:19:d6:a6:08:d8:8d:6e:78:f4:
f7:0a:d6:5e:9d:f8:5c:75:93:ba:ac:60:16:a0:bb:03:2d:b2:
c9:4c:3c:1f:4c:f2:26:51:b6:9c:1b:5d:92:98:3d:c2:75:31:
50:fb:9f:e7:14:4b:7b:8e:13:c1:47:65:09:59:2f:41:18:76:
eb:b5:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:37:02 2024 by rpki-client on console-fra.rpki-client.org