Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer (raw, json)
Hash identifier: qyERjLrjDKbcsOajUDbI9OaHtU4JdXGBy+iUMKpi/zo=
Subject key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D1CB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Dec 2023 18:10:56 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.95.77.0 -- 103.95.79.255
IP: 202.176.15.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Dec 2024 13:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119243 (0x1d1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 13 18:10:56 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:ec:71:97:3b:70:a6:04:8f:a7:7b:cd:f2:
15:f1:15:92:c7:1d:08:13:89:71:b3:51:7d:77:cc:
66:7e:2f:4a:b2:8c:63:97:83:63:43:0c:98:5e:79:
13:f9:b0:27:61:9e:8c:a9:5a:37:17:5b:c5:ed:25:
8a:3b:30:32:42:c0:a1:73:4e:35:f5:f6:e3:60:5c:
23:4d:71:db:2c:4d:43:66:41:5c:58:f1:b7:8a:a4:
7e:16:a9:07:b9:99:bc:eb:a2:bf:02:b6:ff:41:18:
1d:a4:9f:bf:89:5d:1e:13:4f:e8:8f:a9:a2:af:9f:
a3:1d:a8:30:ab:b0:ad:ce:83:fe:a3:2e:c5:35:c9:
89:0f:38:3e:65:b8:fa:b8:73:a0:cc:12:c2:0f:6c:
d1:75:c3:e2:40:e3:54:f5:22:5e:00:75:1f:fc:bc:
46:5f:9c:e7:c0:ae:85:ba:85:b3:da:da:10:e9:c1:
a7:ff:f6:9f:fc:43:75:07:51:53:bd:65:d6:70:67:
38:34:10:14:4a:61:27:b1:da:3c:b9:a4:b4:c9:f2:
f3:00:7a:b2:9e:f8:fe:b3:a1:21:24:42:1f:6c:5a:
89:54:d1:d1:47:3b:45:d4:e2:5e:6e:a3:9f:d4:fe:
df:6c:02:74:c7:74:02:52:d8:87:6e:58:3e:08:3c:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.77.0-103.95.79.255
202.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d7:dd:37:ff:6e:cf:ff:05:3b:d5:18:01:ea:a4:77:53:37:
0f:5c:e8:58:f4:b1:ad:d1:b4:fb:fc:e2:d0:84:db:00:6e:79:
4e:bf:d4:68:4f:01:46:00:98:93:d5:ea:de:99:6c:56:07:a7:
31:3e:5a:93:dc:2c:ff:7a:26:ec:0b:2f:82:9c:6d:b0:41:7a:
1c:9c:c4:85:86:18:5f:20:a5:ee:c1:d6:d0:62:d7:bb:ec:79:
39:00:ab:f3:a4:f9:b0:a1:b3:98:84:ad:4d:4a:f4:24:3c:20:
a6:d2:51:b3:09:70:44:69:df:05:9e:78:73:60:d3:b6:b8:49:
7b:aa:d7:14:32:59:60:c5:1c:b9:e1:bc:4b:4d:9c:ef:2a:7d:
02:77:44:11:4f:88:e7:be:38:3f:dc:df:53:49:c6:3e:16:02:
fa:2d:81:5b:43:bf:f8:b4:b5:5e:f5:4e:82:7c:27:f0:bb:f7:
cf:4c:d6:8b:c2:20:f8:50:25:b4:10:cb:6c:15:88:22:9a:b5:
bb:e5:83:ca:df:2d:43:8b:0f:2f:d7:e6:06:19:6e:aa:37:4c:
19:cd:40:20:5f:ec:11:c5:58:51:db:87:c5:f8:72:f0:e7:05:
38:0e:fe:0f:ca:c5:ef:5d:37:42:ac:4e:13:43:67:52:47:d9:
68:b2:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:48:45 2024 by rpki-client on console-fra.rpki-client.org