Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer
File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer (raw, json)
Hash identifier: 0qnQOfepPfTbB/g4TlxIxZNeP8TKivyksaGXyE0SkVI=
Subject key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02091B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Aug 2024 21:15:03 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.140.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133403 (0x2091b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 21:15:03 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:de:34:22:11:b1:63:72:6b:9b:7d:f4:20:
dd:66:07:c9:b1:fe:84:00:ca:1d:72:1e:44:b2:95:
f9:aa:3d:64:4a:a2:bf:69:a7:a3:be:e6:da:ed:a8:
33:9f:c4:36:bd:33:fb:b6:a8:55:c2:02:f1:0b:a7:
69:94:c7:30:9e:86:3b:1f:fa:8a:4c:51:42:e1:dc:
97:37:5c:d2:1c:8d:cc:c3:9f:d3:bc:f2:df:58:0b:
52:da:d6:52:fd:0f:e4:04:8f:55:aa:3d:dd:04:19:
9f:01:6c:8f:d5:2d:53:e4:b8:12:0e:c5:01:83:aa:
e9:e3:14:bc:26:97:a5:90:18:f0:d6:83:89:05:90:
72:9d:52:f4:14:4b:f0:cd:9c:23:1b:85:88:32:e9:
00:46:d1:89:70:58:dd:68:73:ad:25:44:fe:8f:21:
a5:9b:75:45:c5:cf:33:d2:58:c7:e7:a0:1a:2b:2d:
76:1a:bb:81:72:b2:52:c3:31:96:b9:81:50:ad:d2:
64:db:22:4d:55:bf:8a:54:45:68:97:6b:c8:28:24:
90:82:2a:a7:2e:fd:83:04:99:d7:3a:6b:ed:57:91:
cc:f8:2d:06:6b:dc:9e:be:da:5f:e6:99:de:a3:67:
19:1a:be:95:fc:01:41:db:81:6e:a2:dd:9f:b8:db:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.226.0/23
Signature Algorithm: sha256WithRSAEncryption
60:08:cc:99:68:8a:b1:7e:04:ac:5b:4a:7a:14:b1:d5:82:ff:
64:85:ca:b3:6d:2e:6a:47:a8:55:81:7f:ae:3e:eb:d2:b3:a3:
26:50:f1:6d:fa:46:98:0c:4d:18:79:ba:af:3b:a6:c8:59:a2:
ea:f3:1b:bb:99:2a:b9:5f:e8:11:0f:08:ab:5d:46:9a:bb:7a:
44:4c:f7:25:ca:6b:cd:36:8f:a9:ae:5b:5f:c7:b9:ab:82:1a:
28:d8:64:e5:e0:03:a0:27:95:28:e5:a7:af:e0:e2:fa:69:a6:
5e:a2:d4:0b:c6:45:48:ce:1b:a8:89:ef:1b:cd:61:c2:40:72:
f6:a7:c9:87:72:1f:4e:d9:23:bb:a1:ef:73:25:ad:b3:8b:c6:
b2:6c:83:09:c3:12:82:f7:0c:03:bf:4d:a8:42:9d:22:b5:07:
50:6e:5e:a5:fa:78:c4:23:0f:1f:05:69:99:59:e6:8c:60:6b:
90:72:f5:7f:dd:b0:1c:21:41:d6:0d:9f:47:9d:dc:f2:58:90:
68:ae:7a:f3:ea:b8:30:24:80:96:1f:4d:68:19:bf:7b:09:7c:
91:00:53:d8:04:9d:ae:69:e7:19:dd:12:84:5b:d9:99:b9:ed:
b3:56:bb:68:dc:18:e6:c9:8a:47:d7:db:23:b1:87:46:49:e1:
52:7c:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:42 2024 by rpki-client on console-fra.rpki-client.org