Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer
File: kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer (raw, json)
Hash identifier: I7hiWJH9GM1z2AiGq+47l65qlDjFCwE89XNmtGSmFHk=
Subject key identifier: 92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F01A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 May 2024 12:46:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.137.120.0/22
IP: 2404:b040::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127002 (0x1f01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 12:46:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A911D5F1/serialNumber=92E848E71F7008DCC777B8E23F73DA9278C9A50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:2a:85:b5:22:a9:4a:9a:0d:22:04:6d:b8:
1f:db:1c:dc:98:06:87:66:c9:39:46:b2:ff:ac:44:
60:4c:23:08:b2:ec:5c:c4:52:ed:e7:88:66:32:90:
49:1c:41:16:3c:a5:6f:cd:0c:82:95:17:32:ee:4c:
92:3f:c9:18:e5:b4:5f:bb:3f:e3:ee:94:c7:7b:65:
46:5b:7b:08:86:0e:83:3b:33:72:af:de:43:e4:1f:
9d:1f:70:43:43:81:f6:c2:c3:c9:ad:52:86:53:66:
f1:3f:b5:45:2f:e3:ea:5c:79:88:cf:3b:93:85:7b:
e7:43:a7:8b:c5:24:53:aa:75:6c:33:a3:8b:d0:4b:
e1:df:56:db:21:70:47:68:75:2a:93:33:4b:0a:fc:
98:95:4a:29:e7:10:cf:e1:9a:24:45:c4:e1:6a:88:
60:ce:d5:b1:8f:e5:19:4b:c3:6c:c4:7c:7f:58:7c:
3a:a0:c4:ee:de:d3:c7:18:fb:95:e3:d8:cc:bc:9d:
4f:e2:a4:4b:71:d1:75:f2:48:1f:f8:f2:3d:b8:00:
ba:53:30:52:3a:9f:2a:a0:a6:1e:f5:d1:f3:59:e9:
80:88:41:ee:0b:05:8d:0a:6b:ba:a0:58:cb:e9:58:
f3:c1:ce:15:6e:82:6c:95:ad:36:c7:1f:8c:ed:b3:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.120.0/22
IPv6:
2404:b040::/32
Signature Algorithm: sha256WithRSAEncryption
68:b7:96:fc:10:07:df:5b:ac:02:9e:7d:f3:05:a9:b1:b5:90:
5a:f2:4f:1d:d5:6c:92:d8:f7:e2:19:81:6a:06:b0:9b:77:b2:
4f:26:17:ee:48:37:c2:d7:ad:2a:91:31:c2:ff:d0:08:60:51:
95:9b:a3:93:b3:95:19:bf:fc:6e:43:77:da:40:7b:1a:4f:61:
c5:cc:d7:9e:10:c4:71:0a:40:9e:fb:30:6b:2e:16:3f:f6:86:
98:3c:2f:75:6b:34:58:b1:aa:ab:5c:66:f8:b1:7c:67:af:6f:
e6:57:e8:8c:6d:ef:a9:93:3d:01:b8:7e:f3:cb:bb:8c:a1:98:
83:75:a9:cd:19:c7:fb:9a:45:87:37:ac:f1:ed:6c:a3:1e:ef:
c2:9c:76:ce:5f:84:b1:80:17:13:1b:e8:d1:61:86:6f:f8:1d:
af:6d:71:bb:22:db:e1:e3:89:6a:4c:bf:b8:36:26:c6:4b:01:
c7:c0:b5:2d:ee:f7:f9:f0:8b:18:6e:e5:4b:70:19:40:7b:02:
7f:f2:0c:3c:b8:6d:80:90:37:da:fd:89:d5:aa:78:2a:40:2c:
a3:b0:67:a8:f9:4b:69:f0:ab:f1:8d:c6:a8:70:e4:cd:48:c6:
dd:8a:26:8f:c0:40:11:c1:20:f2:45:c5:a0:89:8b:55:98:69:
21:11:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:43:10 2024 by rpki-client on console-ams.rpki-client.org