Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32858r33bgaklIQq2L-kHdk2Uw8.cer
File: 32858r33bgaklIQq2L-kHdk2Uw8.cer (raw, json)
Hash identifier: pHSHzVQ0m6jpiQfMhTmHyDaYpIXfm8FytlP5sVHp4/4=
Subject key identifier: DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DF3B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 Feb 2024 16:23:05 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 43.230.84.0/22
IP: 103.49.128.0/22
IP: 2401:fe80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 18:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122683 (0x1df3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 16 16:23:05 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A918801E/serialNumber=DF6F39F2BDF76E06A494842AD8BFA41DD936530F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:7c:dc:ce:0f:f1:55:0c:63:62:f9:da:89:
3b:52:e7:88:0d:c8:c9:8d:58:88:64:9e:97:20:b4:
56:3d:e7:6f:cd:47:b9:b9:6c:1a:65:fd:f5:24:a0:
1e:e1:03:1b:a6:42:2c:3f:e4:55:a0:f5:15:eb:c3:
75:01:0a:05:e2:4f:df:8d:8f:8c:d5:33:52:3a:91:
5d:78:84:ed:9f:11:be:f0:93:65:c4:3c:45:d9:10:
d8:44:b6:77:81:50:f2:10:80:b0:99:54:a2:ed:0a:
01:07:4f:d5:4f:66:99:73:52:85:ba:6d:b5:d0:61:
86:db:60:e8:4b:7e:28:f6:92:c5:30:b7:82:06:17:
89:fa:a3:42:13:d5:3e:b8:c9:35:a0:ec:da:1f:06:
6f:28:7c:ee:35:6d:88:3c:98:bd:77:25:49:bf:08:
6f:a0:16:a4:57:72:c7:a1:04:55:07:ed:41:29:98:
40:1c:5d:c6:36:9d:07:fe:73:f7:6d:fc:ea:aa:08:
20:c1:72:39:95:66:cb:16:2c:2b:76:51:c6:38:b4:
4c:01:23:58:4d:2d:56:8a:c8:c3:8a:37:e3:49:56:
74:0a:ae:ed:76:31:c7:ea:b6:48:e0:e2:08:5f:f5:
14:e1:b7:6c:49:2b:04:80:29:16:be:37:4c:20:9d:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:39:F2:BD:F7:6E:06:A4:94:84:2A:D8:BF:A4:1D:D9:36:53:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918801E/EDBCB56676D011EB8A26713BC4F9AE02/32858r33bgaklIQq2L-kHdk2Uw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/22
103.49.128.0/22
IPv6:
2401:fe80::/32
Signature Algorithm: sha256WithRSAEncryption
33:08:4e:69:e3:51:4c:7d:5d:7b:2a:28:6f:ee:9d:4f:cc:38:
0a:d4:46:65:64:ad:3e:ae:40:16:87:17:83:e0:a2:1a:30:a6:
4a:71:d4:c7:ca:c0:1d:86:5c:74:e1:d6:6e:3f:89:60:b8:b7:
cd:ec:b8:b0:69:dc:ec:cf:36:9e:bd:2e:8e:6b:c5:15:56:dc:
05:f4:b1:30:f7:5d:8c:48:3d:59:1b:4b:0d:b8:4c:e8:35:87:
de:84:19:09:89:a8:d1:ce:30:52:36:83:28:74:22:e6:04:5c:
63:be:60:ab:f5:96:a9:36:14:26:bf:9c:33:1f:97:60:97:20:
35:f5:e2:04:fc:1b:50:bd:99:c9:3d:21:c7:e2:a6:ca:dc:f6:
d7:b5:dc:3d:2e:ab:83:89:04:fa:47:44:9e:f1:ad:2a:25:02:
1a:40:46:0a:15:44:8e:d6:b1:c3:f7:c3:16:9a:3b:9b:e6:fb:
0f:11:19:dc:72:02:02:03:29:91:7f:76:b7:2c:4d:c8:4a:36:
c9:72:aa:52:44:dc:92:03:a8:46:68:e9:ed:3f:2a:0c:23:65:
f8:8f:a1:91:30:a6:0a:f5:f5:f1:de:60:66:b0:2f:c4:84:84:
54:cb:95:5e:bc:aa:db:20:bd:48:49:b4:f0:cd:ce:ac:26:e6:
da:7d:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:18:27 2024 by rpki-client on console-ams.rpki-client.org