Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
File: 01nlbdoAA8SD861qQMCA6Qy41HI.cer (raw, json)
Hash identifier: 6cBsz1X1iKiWqSD4mQsNPCSDg+aQU5JixqaqLUexghA=
Subject key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FEC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 08 Jul 2024 07:09:17 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.75.172.0 -- 103.75.174.255
IP: 103.216.98.0/24
IP: 2001:df1:f600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130756 (0x1fec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 07:09:17 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:65:f2:42:37:8d:d2:44:13:2c:4e:f7:14:
1e:17:44:a9:3a:e5:5b:4b:55:ad:5c:1c:e3:ae:df:
46:03:0d:fd:36:76:b5:17:7d:de:93:b5:7a:8e:b3:
f1:6a:99:69:8f:f2:bf:9a:05:84:39:02:6d:b9:a5:
b9:9a:86:d5:21:e8:1b:db:95:64:3f:e8:1e:7c:2d:
ba:6d:96:c9:c0:3d:9e:9a:de:1d:a1:9c:ad:4c:b2:
d0:38:ff:b7:be:d7:a1:cd:29:fb:36:aa:7e:02:6f:
e0:c7:c5:44:62:59:df:de:d7:53:f5:e4:e4:53:75:
2d:bf:47:6c:21:4e:0d:0e:fb:50:d1:54:15:73:3e:
18:ea:fc:9b:c8:cb:25:27:33:e0:d7:9c:ed:e0:cf:
5b:fa:b2:89:c9:05:9c:4b:2c:d2:44:88:43:17:c6:
74:ac:38:bf:07:67:5a:3b:20:42:74:ea:c2:f0:0b:
62:08:23:eb:21:56:49:5c:37:1d:c7:84:0c:ea:bd:
97:b9:a9:a9:c5:2c:4f:4f:61:34:d4:56:f9:64:50:
f5:55:12:e6:c7:25:d0:dd:31:49:23:24:a0:86:2f:
99:2c:ba:f4:51:fc:08:3b:44:80:d8:03:6f:19:c3:
c2:25:65:65:6a:3a:a0:8c:5e:bd:a0:45:14:e0:30:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.172.0-103.75.174.255
103.216.98.0/24
IPv6:
2001:df1:f600::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a9:b3:d2:17:c4:a9:2b:a9:4e:a8:11:85:c7:47:f5:38:16:
fe:41:43:15:8d:b1:18:ca:36:39:2c:78:4b:c0:5d:19:e8:3b:
3f:68:89:c6:3e:05:12:ef:80:29:7c:66:8a:20:c4:5a:97:f6:
88:cb:7d:51:07:bf:5b:fd:b2:ac:e2:75:ed:5b:7c:00:03:4b:
1e:2a:41:84:1c:b5:e4:bb:46:65:4f:15:00:96:f1:7e:ce:3b:
92:3f:21:ba:fb:48:b6:d1:b1:fb:1a:4b:8a:1c:1b:e9:4e:c4:
4c:f8:67:03:98:60:66:04:c4:27:8f:41:7d:5c:36:6c:18:20:
c2:a1:c9:e2:4d:f0:f3:53:16:c1:08:24:94:41:2a:e2:d8:96:
d1:6e:47:46:ae:18:66:d1:fa:92:ee:60:8d:dd:da:d6:eb:4d:
66:a5:45:cb:a5:0c:64:0d:bc:74:5e:6c:a1:0e:9e:60:03:b9:
5a:21:9d:bf:0e:57:8a:17:34:35:57:8f:59:29:91:3c:ca:3f:
88:53:96:6e:f2:07:06:c3:e9:31:24:9a:19:67:36:ca:77:30:
1f:1d:aa:46:d6:48:68:19:c5:28:15:14:38:63:02:92:20:a0:
19:9c:75:46:c2:fc:bb:c7:cb:21:c8:62:fe:db:07:77:32:fb:
cf:3d:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:16 2024 by rpki-client on console-ams.rpki-client.org