Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
File: 5muokllQFHlLtkUdFCgchAAgYgM.cer (raw, json)
Hash identifier: SnZ/0/wUnH/E1jSjIjBQ17y1bom6i6u+Nd6FN7W8f4Y=
Subject key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0201C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Jul 2024 14:41:07 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 103.116.188.0/23
IP: 2001:df5:5d00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131525 (0x201c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 14:41:07 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:cf:eb:4c:68:85:a6:1b:f5:4b:e8:19:fb:
73:0a:f3:4e:9a:d4:79:40:ee:e0:c3:39:e8:6b:fc:
95:3d:43:23:73:29:90:c2:85:ee:ec:f8:39:c6:bf:
ba:e3:e9:df:b7:a0:ca:97:e1:ee:a1:30:a8:56:5b:
e8:7a:c2:8a:3f:e4:e7:b5:45:74:74:41:2c:8a:5d:
4c:cb:8f:e4:56:3e:5a:8e:1c:5e:e9:36:b3:a2:cc:
49:12:bf:ba:a6:74:6b:4f:ec:5c:43:89:1b:b5:69:
92:dc:7d:61:ab:03:d8:76:a0:1f:a0:c7:e0:09:60:
3d:0f:d2:c5:5e:c0:0b:51:13:7d:82:c6:99:94:39:
e6:f4:63:83:98:88:12:1d:52:69:3e:26:be:9d:a8:
f8:d1:78:a6:7e:ee:1b:2a:f2:5e:0c:65:9d:ff:e1:
a0:c2:56:c3:44:be:40:88:12:63:b6:7c:bf:a1:3e:
ca:2a:90:37:e7:03:b7:a5:c0:55:4f:d7:0a:8c:4f:
d5:3a:35:05:31:3d:2b:ae:8c:fa:a4:3a:4e:d2:27:
b6:47:67:b5:d3:c0:4d:7e:19:e1:58:6b:53:c0:7c:
40:bf:82:0d:e4:f9:eb:1e:34:42:19:50:c5:b3:84:
be:2b:19:48:90:f7:2f:1b:a9:95:f6:3a:32:e3:b3:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.188.0/23
IPv6:
2001:df5:5d00::/48
Signature Algorithm: sha256WithRSAEncryption
cb:92:d9:82:98:94:ea:3d:02:a4:92:89:d0:0f:50:8b:25:78:
42:d1:3d:2b:11:81:54:70:d9:68:4e:0c:1b:b4:57:58:f2:d7:
1f:a4:99:c2:8c:69:56:dc:02:40:a8:59:98:19:0e:57:11:bb:
79:92:55:d9:59:15:bf:5c:85:f9:e9:b2:c5:6e:74:e9:2f:d5:
31:5c:26:32:92:49:64:bc:47:d6:ec:96:cf:d0:d8:dd:af:d7:
89:a7:33:4a:c3:79:b3:b8:9b:53:61:7c:f6:b7:4c:61:a2:d1:
ba:d5:3b:90:80:e9:84:78:d1:9b:32:c7:6d:9e:c8:50:f5:72:
ca:4e:e3:4c:7c:14:56:8c:50:0d:7f:0a:e7:c0:fa:1d:1b:ea:
8f:f9:9c:c8:b0:ae:d5:9a:f2:67:c5:60:ea:d0:64:79:0a:3e:
aa:57:1d:0c:c2:c0:22:b6:0a:50:9f:d0:a8:0e:2a:a2:cb:3d:
05:97:2e:94:6a:d2:a1:89:37:ec:a5:44:3c:51:9b:cc:d9:5f:
f7:68:2d:02:3b:44:c9:ba:76:36:a5:02:11:cf:56:c1:26:8b:
1a:55:cb:64:12:88:de:0f:5c:f8:d4:0f:a3:c3:1a:fa:09:09:
89:04:58:f3:6d:58:67:98:d6:89:17:08:fb:74:14:b1:a5:7a:
24:45:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:09 2024 by rpki-client on console-fra.rpki-client.org