Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.cer (raw, json)
Hash identifier: HqSMYmL1enzb69Vm+EHneqMMGEwUuk96AW9V9I/5Pjw=
Subject key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AB44
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Jun 2023 16:51:56 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.150.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109380 (0x1ab44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 16:51:56 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:30:f7:3d:ad:53:e2:3f:e2:98:75:1d:86:
ad:01:51:87:f8:4e:40:1f:de:e3:d0:5c:00:6b:e6:
6d:73:de:fb:c8:d0:88:58:53:a7:93:e1:b8:8b:15:
cb:eb:6b:f9:5a:4f:8f:87:72:1e:71:31:e0:82:27:
07:da:f5:86:87:b6:33:4c:48:6d:87:eb:47:86:56:
2f:71:12:c9:11:2c:d0:0e:25:66:98:1b:d1:c8:74:
da:64:ab:66:fd:fa:d6:26:ea:a0:a4:e9:85:7f:a1:
86:56:64:43:e3:8b:10:0d:c3:42:db:6e:0f:d6:70:
fd:84:bd:97:27:95:8c:89:d5:7e:b2:a3:65:b0:11:
05:35:b2:3d:2a:16:24:e7:3d:26:b4:e4:38:34:83:
16:0f:ed:23:f5:86:df:67:b0:7f:59:08:2a:7d:80:
4f:ef:80:01:0f:a9:ce:ac:a2:4a:1c:83:f4:4b:b9:
c1:49:99:eb:8a:64:27:85:07:ec:b5:80:14:2c:70:
33:93:e1:68:c2:9a:60:97:8b:65:01:9f:1d:d3:55:
05:b7:5b:7a:30:56:30:3f:37:8f:88:46:46:a8:92:
95:d4:45:25:4e:10:db:30:05:5a:5c:2d:3a:49:10:
52:82:b1:6f:47:89:4d:43:84:f6:ef:96:b5:50:f7:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:77:94:51:0d:04:3c:2f:10:6e:4f:50:9f:2c:9f:b9:2d:8e:
10:34:c6:d0:10:08:ea:e8:8e:49:7e:c0:45:39:58:f0:39:e5:
5c:c7:61:a8:37:6a:04:34:fa:31:6c:8f:39:e5:ab:4a:7e:d3:
38:53:f3:5d:79:31:47:85:cd:db:df:e3:51:9a:6b:9a:7d:ab:
83:f3:0b:b2:16:b5:fc:2b:09:06:e6:6c:aa:ad:0b:de:0b:66:
c6:fd:70:ea:07:e5:5e:df:df:e0:ce:be:6a:09:f8:85:27:69:
4e:38:d7:01:9b:6b:3f:82:8d:d1:ca:f2:8f:dd:cf:c6:6f:aa:
f9:5f:7a:9e:f7:06:ca:18:58:b3:27:4b:3c:00:76:61:d6:60:
ce:76:27:04:cb:f1:af:4c:5d:f0:fc:27:f0:5d:a3:b0:21:36:
db:d0:30:63:59:3a:1f:0f:c8:ff:ec:a9:1b:71:36:35:8a:cb:
f2:13:e0:52:0a:bf:ea:00:39:fe:74:76:aa:46:53:96:ad:ea:
53:d8:3a:02:cf:4f:de:f1:70:64:ed:33:50:57:2e:70:87:c5:
a8:25:8b:3f:4d:8c:af:1a:ec:f6:e9:0f:a1:d9:58:b9:6d:d7:
2b:28:34:f2:bb:7c:78:89:a5:f7:52:fd:2a:30:c3:65:18:e0:
38:64:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:46 2024 by rpki-client on console-ams.rpki-client.org