Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer
File: rbkheCH_vuCW4c7EcJijFFokbqA.cer (raw, json)
Hash identifier: l4hv1BpazzuYpiMeIUv5EqK/GoRYFhdKOwo1yQFSuOs=
Subject key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F950
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Jun 2024 01:32:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.110.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129360 (0x1f950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jun 15 01:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91F6E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:d1:95:54:62:bc:ee:83:2f:65:22:c8:32:
c4:23:f5:8b:af:ee:03:22:31:4a:09:2d:e9:a9:a9:
57:a2:ec:07:07:8f:d9:77:c9:48:c8:88:1d:75:35:
ab:8b:f4:d4:17:cd:ab:eb:52:40:ed:98:ba:0b:eb:
1b:b6:23:43:cc:21:5b:0f:81:e5:11:3e:22:7a:f4:
db:d8:c1:a4:88:3d:b2:54:e3:fc:5e:8b:00:23:f1:
8f:6d:59:1d:ed:56:74:c1:5c:3f:6b:44:d1:8b:0b:
22:00:67:d3:cb:e5:cc:4a:aa:1f:27:42:13:5f:dd:
9f:5e:21:c3:ce:62:a9:23:57:8c:97:42:3a:c4:01:
fb:f5:7d:5e:cc:d2:78:78:02:1c:1e:d4:c8:53:4f:
c4:4c:60:38:5d:a4:0c:ff:20:f9:f6:6f:50:93:e4:
58:8a:b1:ba:f9:23:85:03:59:50:bb:9b:df:6e:41:
13:ff:cf:5e:58:48:47:01:c1:b7:2b:46:02:1a:1d:
b9:7e:f0:28:4a:a1:da:87:fe:75:24:99:d6:80:33:
3b:bf:0b:79:db:72:f9:38:bf:9c:69:cb:71:0a:01:
f9:46:e4:dc:1b:65:4e:d9:3a:b8:2d:c2:bf:6f:36:
2c:2d:ce:24:75:48:f1:72:85:88:5e:16:d2:ae:ee:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.88.0/22
Signature Algorithm: sha256WithRSAEncryption
70:c6:4e:fd:8d:24:4f:72:00:e4:62:3e:2f:2a:f4:5c:71:3a:
0f:49:01:be:08:1c:61:60:6f:d3:6c:c5:7c:53:d5:fd:5f:54:
ae:c8:0e:87:a6:37:f2:a9:ef:6a:a1:35:cd:30:74:3b:46:52:
ff:83:14:c3:3b:4d:25:8e:2c:2c:d0:20:df:0d:dd:a6:1b:6b:
70:0f:62:1c:4f:0d:f8:4d:e6:ae:b6:61:ec:a4:9f:fd:7c:98:
b3:5e:73:4e:72:f7:a6:b3:8e:72:4d:e8:d5:67:1b:5a:a3:46:
bc:03:1d:a1:f0:19:7b:30:36:38:2d:3f:f1:b7:53:2c:ba:1d:
83:03:ee:04:7c:2c:77:bc:97:a3:4a:5b:f6:07:11:4d:d9:fc:
4f:a0:9c:4a:55:b3:cf:6a:9d:6e:09:cd:d9:96:82:5a:d0:0f:
02:a9:9e:67:ec:1e:7e:12:9e:f1:73:df:5e:32:df:e5:20:51:
db:20:07:13:69:4b:cd:d6:d2:48:09:2b:09:8a:da:6f:e2:d3:
7e:96:52:c1:de:bd:47:a5:38:1f:b9:df:c5:66:08:ff:d6:dc:
f8:bc:19:82:c1:dd:1c:41:bc:89:a1:c8:b2:e8:a6:14:fa:53:
6d:13:29:1b:77:da:d0:ee:07:04:45:5d:56:60:a8:fd:10:29:
a9:12:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:31 2025 by rpki-client