Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.cer (raw, json)
Hash identifier: VcWnCSk2KDTdQissZwN0B4vV+pl6FMLM0XVmo9tVWg0=
Subject key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A55
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 15:58:20 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.130.12.0/22
IP: 2403:ae40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137813 (0x21a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 15:58:20 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:8e:43:d3:3a:62:d4:f1:a7:bd:08:59:d4:
d7:53:01:9a:cc:80:d5:c2:76:ad:11:1e:62:22:ab:
4f:2d:ba:a0:f7:06:93:be:31:32:f1:41:d7:58:6f:
34:14:7e:62:42:65:d6:93:28:26:16:e6:ea:53:0f:
c9:81:31:98:00:3a:9a:e4:a0:1c:7f:8f:13:85:9d:
7d:15:ff:83:ab:25:4a:7f:07:28:a5:9c:38:23:aa:
42:01:e4:93:b9:64:f2:c3:24:71:66:3e:2b:a4:ce:
07:39:58:54:76:82:1f:de:67:6c:b6:b7:87:d0:fc:
8b:b0:f5:19:88:18:ff:0c:0d:3d:b1:d2:22:b6:8e:
fb:8a:dc:4c:c1:03:d7:39:39:aa:1a:a1:4a:f7:30:
19:6c:e6:0a:78:c7:04:8a:bc:62:56:bf:31:5d:e5:
bd:9c:90:94:f3:5a:04:ac:ce:88:e2:b1:64:3c:74:
01:9e:7a:ef:d8:fc:92:23:80:23:05:65:09:cc:1e:
ab:0a:1f:54:3f:e1:89:02:3c:f2:2e:f7:8a:f7:1b:
64:b5:82:b6:f0:24:75:e7:13:a9:f2:0c:16:4f:0f:
24:e2:a8:3d:67:0e:59:2b:f5:61:64:79:50:de:9d:
1d:3c:aa:21:cc:f5:9d:45:54:43:af:71:c3:96:49:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.12.0/22
IPv6:
2403:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
b2:9d:97:73:cc:83:92:3e:88:4b:b0:38:66:f2:9e:22:26:3f:
4c:cd:ee:49:14:00:bb:14:42:a1:d3:73:6a:be:7f:a3:66:1e:
2f:73:3a:ef:fa:da:f1:65:87:d6:94:d2:8c:71:c3:83:09:ad:
75:57:df:cb:0c:11:ce:f4:d1:79:31:4d:3c:20:af:b1:8e:37:
53:e8:86:0b:94:8c:1c:01:30:35:3d:23:72:cc:84:25:91:01:
64:cd:de:06:89:01:44:b9:4e:e6:23:9c:e9:36:c1:90:bb:84:
40:95:f7:22:f8:9a:36:2e:ca:3a:9a:02:a2:79:26:b6:13:b4:
2e:99:7e:04:b6:e8:4e:12:7f:9b:0b:e1:07:ad:2d:95:44:22:
d7:5f:10:51:25:2c:68:a8:92:79:a9:2e:27:91:a3:e8:ef:3d:
b6:c4:b1:92:a9:e4:9a:e5:57:34:d0:2f:79:f4:2d:74:f4:9e:
68:ff:9a:43:75:f0:c8:23:4c:1d:a8:1c:f8:f1:a1:19:58:7d:
31:93:85:eb:d9:29:b6:57:66:9f:99:ad:4f:20:f3:5d:03:e6:
56:b5:4a:ff:23:1c:dc:42:31:09:41:fd:6f:b5:7b:ac:97:cc:
b6:72:ba:f2:b2:87:fd:51:88:57:b8:24:a9:84:7e:0e:0c:6b:
39:b3:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:26 2024 by rpki-client on console-ams.rpki-client.org