Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
File: 1icW92HxiNVvoRf53JS-QUEEpoE.cer (raw, json)
Hash identifier: WmTv8U8SW0QD+8i4WEKlKHxnXrvhCG6SViwYPut7n7E=
Subject key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021DDD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 05:54:16 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 140704
IP: 2001:df4:18c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Jan 2025 09:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138717 (0x21ddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 05:54:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:83:86:e9:e8:df:c7:c9:90:45:1e:26:b5:
2c:d5:8f:92:7b:dc:d9:f9:57:e0:1d:93:14:fc:fb:
44:e0:da:13:7d:94:1d:66:6a:ec:78:4b:b8:a7:cd:
91:2d:85:3f:5f:48:ee:dd:eb:cb:e1:f5:ef:b1:0b:
6e:e4:b2:a0:ca:7b:ed:28:32:11:b9:69:e7:ed:41:
96:2c:0d:83:48:f3:27:7d:43:99:a4:2a:99:46:bf:
26:93:d3:48:21:39:11:5d:e2:9c:96:1d:c9:49:24:
b3:87:1e:cd:6e:25:90:79:6f:a8:0e:71:86:35:b7:
3f:c1:ab:cd:37:d1:b3:a3:33:fe:fd:3d:78:bb:e4:
d8:16:f5:50:5a:43:af:37:f8:f4:0b:d1:fb:f9:ae:
00:fb:5e:5c:86:4f:2a:de:ee:b9:b9:42:5a:e7:ff:
23:86:7c:4f:76:8a:b5:ae:be:75:57:d9:dc:39:c5:
a4:97:92:a8:d2:85:1d:19:85:b5:d5:13:4b:48:7c:
29:a5:1c:4d:14:e1:5e:a3:e6:1b:96:4a:d2:a1:fc:
5f:c2:39:7d:e1:09:7c:af:d9:5a:e6:b4:52:01:5b:
b7:02:42:d0:41:2b:c7:f3:6e:97:40:92:ac:78:a7:
35:ad:5e:bb:e1:1b:ed:e7:7b:f5:39:a5:87:7f:a0:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140704
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:18c0::/48
Signature Algorithm: sha256WithRSAEncryption
96:08:d9:7c:83:8c:6b:49:c4:94:2d:5d:6f:ad:30:1d:7f:81:
37:1f:33:bc:19:3c:99:41:77:76:b8:25:74:70:c3:0e:bd:37:
88:be:75:a5:1b:47:0f:4e:46:28:b7:b1:0b:6f:ab:7d:9a:7a:
4b:6b:b2:3c:87:98:dd:ac:7c:3d:97:11:ab:19:78:dd:f5:ed:
d5:2b:cc:51:21:13:ae:8f:a2:97:25:08:be:8b:fe:a0:25:5f:
79:b3:46:62:a2:2d:bc:0e:ad:fe:f9:03:c4:db:ff:98:67:21:
22:28:87:50:e1:43:f1:09:a2:8b:f7:27:c3:68:8b:d8:0b:0d:
0a:ba:e9:6b:a2:e1:2a:75:78:78:76:4c:33:7f:a3:17:92:18:
03:90:16:52:36:fc:49:aa:be:f3:32:f1:27:f7:6c:1a:da:15:
93:7b:0a:30:03:45:0c:40:b1:72:bf:8c:8c:18:b9:e1:b5:c4:
70:7c:6d:30:d7:83:58:07:23:9d:05:09:7b:d2:0b:29:dd:88:
bc:69:a7:58:c8:50:23:06:d7:8d:b1:f3:5b:8d:c9:3f:d0:79:
dc:5d:45:8d:10:c1:0c:b2:16:79:1f:01:f1:d8:cc:ac:e8:e4:
6b:a9:97:62:af:80:59:0d:ac:ba:da:6b:75:23:53:b4:66:a1:
cb:6e:9c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:22:41 2024 by rpki-client on console-fra.rpki-client.org