Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.cer (raw, json)
Hash identifier: 6cZYaOzoRpXKZXoGpp5hLSJTlbP+Zbjt52gfrJpIfvQ=
Subject key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020AD1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Sep 2024 20:52:02 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.14.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133841 (0x20ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 20:52:02 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:98:4c:95:c6:ea:dc:b8:c7:b5:3a:b6:b1:
f6:11:50:bd:69:90:1f:db:50:58:53:49:55:37:3e:
ca:77:bd:9b:86:3a:fd:32:d5:78:41:54:17:66:63:
69:8a:52:04:22:37:b4:ba:a5:a5:36:29:a7:cf:9c:
58:41:68:a4:7f:54:e8:b8:2e:f4:2a:d5:e4:f3:f1:
8b:f1:ba:80:4a:b7:9b:1d:d3:d2:ab:02:1e:0a:1d:
9c:d6:6e:66:e6:e2:83:48:33:1f:bd:2f:9e:67:d4:
90:39:d9:dc:31:e3:60:c5:08:7d:c3:76:46:e1:05:
96:12:7d:4f:1f:79:fc:b2:1a:4e:7f:98:97:2f:29:
57:08:d2:5a:60:09:7a:16:57:9c:7b:27:be:73:32:
19:f1:80:38:4a:17:84:87:76:c0:50:03:38:a7:f8:
51:eb:3d:43:98:46:d3:2a:39:00:58:9d:f9:c7:86:
6c:dc:b2:04:05:87:32:fa:96:9e:66:a3:08:30:a4:
b9:e7:63:24:60:c0:7c:f7:67:3f:d0:9c:28:c5:c9:
23:78:bb:60:b1:57:01:88:b2:9f:53:fd:d4:54:66:
ef:f9:e8:12:23:63:25:6b:9a:95:16:0a:25:ab:2c:
ec:9e:57:73:09:19:4d:08:e0:3f:aa:c1:f8:b8:1b:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
05:9c:c5:de:7f:87:c7:fa:0d:6d:59:a7:57:0e:86:ba:74:45:
34:df:64:ef:05:54:e0:2b:45:41:5b:c3:a1:fb:07:0a:9e:33:
09:00:48:1d:08:af:48:f2:0c:b5:18:32:78:51:82:1b:8c:37:
ef:6b:72:4f:c4:57:0e:04:82:e2:ef:18:16:af:a8:37:c2:5d:
a2:99:8f:f0:b3:3a:64:d2:4a:ec:be:5b:64:9d:c4:02:d0:41:
63:cc:fa:e5:5f:e7:84:22:0c:fb:34:43:d0:5f:a5:6a:96:87:
a1:40:95:78:bb:8c:1a:f7:2e:21:82:87:b7:8c:61:85:e6:db:
eb:fc:c0:4d:e0:6e:58:a7:1e:51:33:14:2e:85:54:3c:96:d9:
4b:84:13:cf:cf:7b:74:28:38:5f:f7:d5:67:13:0f:7b:3a:15:
e6:6e:5d:8a:a5:ce:b1:31:b8:17:3f:76:51:6f:24:5d:f0:53:
8a:aa:34:60:a5:82:99:b9:73:08:72:94:6f:88:86:c1:cf:99:
bb:c9:bc:89:36:79:68:bf:f0:d1:be:31:22:1b:6d:a2:fb:d3:
97:d8:d0:cb:4a:18:5f:2b:73:e3:99:06:6a:83:43:04:50:b4:
d1:d5:d3:2e:e7:3f:93:71:94:0a:dc:c8:ca:c0:35:88:21:dd:
3c:04:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:10 2024 by rpki-client on console-ams.rpki-client.org