Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
File: 4dFD2djqAiJMHLDJFey4TuKLWqo.cer (raw, json)
Hash identifier: P8n8xPAe65WJedPBoUgJ/P/MWUaFsqLDSmprvXxYoh0=
Subject key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 05:41:56 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 38079
AS: 55793
IP: 202.36.64.0/22
IP: 202.49.39.0/24
IP: 202.49.190.0/24
IP: 210.48.160.0/19
IP: 2404:d000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 May 2024 22:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124074 (0x1e4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 15 05:41:56 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:91:0b:f6:7e:15:74:40:26:69:29:01:96:
7b:d3:f9:0f:9c:f4:2e:3f:61:3d:96:7a:88:3c:db:
02:e2:65:c6:04:fe:de:37:fc:dc:ac:bc:b3:c5:a0:
0b:54:e0:b0:2f:ae:78:f2:a4:da:d0:f9:3b:e1:ee:
46:97:71:a3:21:64:b6:cc:db:ab:d9:01:9a:a3:c9:
23:ad:2d:20:c1:ac:12:08:54:cb:cc:c4:26:8b:fc:
92:43:18:ab:d0:0b:03:4f:54:3a:26:09:22:6e:23:
6b:0f:a0:1c:ae:f9:05:74:21:67:97:9c:1c:c9:10:
4d:f0:3f:bf:2b:cc:31:f4:34:2a:94:7b:00:80:b5:
8c:d0:c4:f7:19:cc:a7:ce:56:98:2a:a4:1b:2d:f3:
7b:c7:9e:05:34:18:8e:29:75:db:bf:2b:70:69:2b:
28:98:51:a6:8f:34:4b:69:a4:95:44:92:83:61:4c:
b2:98:4f:93:7c:26:24:d7:73:03:4d:14:9d:bb:a1:
eb:af:96:e2:ba:bf:37:f1:f0:c9:d7:b1:78:1b:df:
d9:7d:8f:f2:03:f4:32:55:ec:09:1c:3a:44:09:1b:
91:1c:ed:b7:98:b5:72:4d:c9:37:72:e6:ee:37:7e:
11:0c:a3:74:db:a1:23:14:88:1b:08:f2:ba:5a:c0:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38079
55793
sbgp-ipAddrBlock: critical
IPv4:
202.36.64.0/22
202.49.39.0/24
202.49.190.0/24
210.48.160.0/19
IPv6:
2404:d000::/32
Signature Algorithm: sha256WithRSAEncryption
4e:90:29:4c:5d:5a:40:4b:a7:3a:18:98:2f:08:6f:78:b1:b9:
47:5d:7f:cd:6b:54:ce:2e:be:02:a5:b0:e6:6a:90:e2:b6:49:
20:57:39:1f:59:1a:42:61:55:ba:80:95:7c:b7:84:3d:54:c7:
f5:27:76:15:41:37:35:50:b3:6b:9d:c8:4c:5e:29:88:94:72:
55:2c:be:d0:ab:dd:a1:da:80:c8:22:f7:07:0b:91:b5:47:c5:
28:53:84:92:ac:f7:d8:95:19:70:b7:87:43:c5:80:3c:3d:42:
aa:39:ec:49:eb:7b:79:45:35:85:d8:1a:a7:47:ae:0f:a7:a0:
ca:42:db:b0:ca:18:03:5b:2e:8a:cc:87:99:b2:9f:d2:10:71:
1c:33:46:68:40:5b:cf:94:fc:b9:45:1c:e0:53:e8:08:f4:d4:
da:73:df:84:93:8f:4d:db:0e:23:46:35:ac:0f:05:ec:af:98:
4f:7d:2b:3d:cd:e6:41:f2:43:50:19:5f:61:90:92:99:99:e5:
9c:85:cb:3a:37:b0:20:14:60:f6:6f:07:ff:dc:d3:98:da:14:
5b:93:95:75:95:41:a0:47:d7:94:7d:9a:04:79:0e:43:07:7e:
7c:4c:b5:08:3a:49:b5:1d:3e:3e:de:b7:42:2c:47:45:34:e0:
00:71:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:34:44 2024 by rpki-client on console-ams.rpki-client.org