Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.cer (raw, json)
Hash identifier: FrKdBo1CtxlGI6UH+XGdv7g7M5OQ/X7CIujuFk6Y2QI=
Subject key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BB09
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Sep 2023 22:34:05 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.14.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113417 (0x1bb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 22:34:05 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:98:4c:95:c6:ea:dc:b8:c7:b5:3a:b6:b1:
f6:11:50:bd:69:90:1f:db:50:58:53:49:55:37:3e:
ca:77:bd:9b:86:3a:fd:32:d5:78:41:54:17:66:63:
69:8a:52:04:22:37:b4:ba:a5:a5:36:29:a7:cf:9c:
58:41:68:a4:7f:54:e8:b8:2e:f4:2a:d5:e4:f3:f1:
8b:f1:ba:80:4a:b7:9b:1d:d3:d2:ab:02:1e:0a:1d:
9c:d6:6e:66:e6:e2:83:48:33:1f:bd:2f:9e:67:d4:
90:39:d9:dc:31:e3:60:c5:08:7d:c3:76:46:e1:05:
96:12:7d:4f:1f:79:fc:b2:1a:4e:7f:98:97:2f:29:
57:08:d2:5a:60:09:7a:16:57:9c:7b:27:be:73:32:
19:f1:80:38:4a:17:84:87:76:c0:50:03:38:a7:f8:
51:eb:3d:43:98:46:d3:2a:39:00:58:9d:f9:c7:86:
6c:dc:b2:04:05:87:32:fa:96:9e:66:a3:08:30:a4:
b9:e7:63:24:60:c0:7c:f7:67:3f:d0:9c:28:c5:c9:
23:78:bb:60:b1:57:01:88:b2:9f:53:fd:d4:54:66:
ef:f9:e8:12:23:63:25:6b:9a:95:16:0a:25:ab:2c:
ec:9e:57:73:09:19:4d:08:e0:3f:aa:c1:f8:b8:1b:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:c0:7b:86:d6:4d:42:c5:19:5d:c3:38:f7:cb:3e:c0:4e:27:
4c:b5:01:e2:62:82:17:c9:31:a7:52:36:44:ab:3e:1b:61:5a:
b0:42:ae:48:ea:52:e8:13:8a:0e:39:13:ec:32:63:ee:f4:6d:
a9:ae:98:0f:bc:6a:b0:82:83:31:40:01:db:c3:c3:6a:17:2f:
10:d8:77:fd:ee:8d:04:b2:ac:bd:39:2b:6b:44:4e:c9:8c:8a:
f8:ca:58:62:87:5e:aa:65:19:44:40:51:46:e7:9d:29:11:15:
6b:97:e3:70:11:1c:38:25:b1:69:bf:d0:db:d0:06:37:3f:2b:
a8:7e:49:70:9f:ed:46:22:bb:98:3f:6f:24:ea:e8:f7:8b:a4:
fc:f4:00:b6:af:84:13:5a:36:2e:1b:af:28:dd:47:e9:49:39:
68:03:ea:44:c9:2d:1f:94:7c:a4:85:4f:5b:5c:54:c0:09:f3:
e0:38:5c:65:a0:e1:f1:57:d3:72:ab:e1:1f:10:fe:e0:3d:e0:
97:4e:d5:cb:97:7b:6b:cb:64:cd:1b:e9:de:09:f9:40:84:8b:
ba:86:70:c5:d5:b4:7b:be:04:25:05:3d:45:ff:bf:46:64:24:
b8:38:27:8b:a3:53:5c:de:e6:bc:b0:b1:58:ef:3c:60:92:b7:
17:21:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:40 2024 by rpki-client on console-ams.rpki-client.org