Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
File: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer (raw, json)
Hash identifier: MeKkUl6Qf60nWGQJj9nCuuCBhghhOPNLhhSwLoIewjA=
Subject key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F707
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Jun 2024 09:44:11 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 152898
IP: 2001:df3:e1c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128775 (0x1f707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 09:44:11 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:ee:ff:7b:6a:09:18:cc:13:31:51:90:c0:
a8:bb:48:91:81:ce:69:48:e5:07:ce:65:7c:dc:6b:
3c:a0:a4:8f:5f:cf:18:08:56:da:48:79:db:52:bb:
02:5b:d9:b3:15:69:4d:06:06:f3:8e:3d:6a:e3:fb:
0e:c8:4c:47:4f:cb:21:41:92:df:a7:41:74:01:4c:
b2:27:87:30:05:23:26:af:5e:ba:d6:e2:cd:4e:97:
72:1e:55:69:1c:da:cf:55:ff:cc:97:6b:50:ba:0f:
92:be:70:1d:c2:00:17:26:09:d1:7d:27:02:ee:4d:
9c:0c:da:cc:e7:3b:40:a2:e1:b6:4a:67:87:6a:42:
04:84:b9:aa:e2:88:8d:69:ec:e6:47:8a:a9:8e:2a:
56:b5:e8:fa:90:b6:93:43:27:7f:d1:83:0c:a2:8c:
d3:e9:8e:a5:29:4b:82:62:31:d6:4a:c1:71:af:80:
21:c7:15:97:dc:47:81:d9:ae:09:81:38:5d:bf:79:
b5:49:d1:f1:b2:c4:83:3d:5c:59:5c:76:69:0f:35:
44:47:f3:10:2b:a8:62:88:36:b6:a4:f8:dd:24:78:
3e:4d:2f:23:cd:e1:5a:b6:8a:32:54:cf:90:24:cf:
bf:e3:51:4a:ad:ab:bb:09:00:8d:77:7b:df:15:aa:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152898
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:e1c0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:19:66:5f:e2:1e:46:52:18:b9:57:b2:35:7f:b4:fa:0a:6d:
40:a9:ad:d3:75:44:5a:59:62:8b:1a:73:dc:f2:20:78:d2:9f:
0e:fe:0f:4a:7b:ed:8e:01:f8:34:8d:f1:6e:e4:12:37:46:87:
58:02:c0:2c:88:fa:c2:3d:1a:4e:34:52:30:45:cd:5e:d5:14:
49:42:b9:03:f8:fa:2e:9c:9f:68:b2:4b:d9:17:a5:ad:b0:a6:
40:9d:9f:d1:c6:83:42:13:3a:27:18:47:2e:52:43:49:48:69:
f0:ac:c9:29:57:47:d8:b4:45:75:6c:02:29:2e:19:ab:50:27:
5e:ea:62:bc:39:83:e7:54:8f:db:52:10:40:2e:bf:8c:43:ff:
ea:d4:48:92:1c:7d:da:64:94:03:ec:99:17:48:b0:84:ec:60:
df:7f:da:37:43:5a:28:1f:ea:07:bc:ce:26:f4:43:f6:60:fd:
90:23:e3:4b:a0:00:4c:dc:ab:52:68:f6:87:95:a2:f2:34:d9:
05:9a:81:a8:67:8a:de:1f:02:f3:cb:4a:de:04:a5:ec:1c:04:
6a:95:cd:2c:7b:e9:99:6d:f4:4c:20:c6:79:14:9f:cd:7c:cc:
b5:a3:b7:03:57:18:0c:35:86:c9:63:fe:1e:d4:d9:bb:8f:94:
78:5c:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:16 2024 by rpki-client on console-fra.rpki-client.org