Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer (raw, json)
Hash identifier: K5vzMX30QGCh8Elm0P2ePUkvrE/3shmqC5eTHoljHw0=
Subject key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C6D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Oct 2023 01:00:36 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 103.255.192.0/23
IP: 2001:df3:12c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116437 (0x1c6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 30 01:00:36 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:4d:de:fa:f3:70:95:22:49:b9:a5:06:4e:
ca:1c:ed:a5:d1:70:2b:98:75:50:a9:54:c2:43:cc:
4e:39:1e:8a:58:e9:85:bf:79:12:6a:f9:3e:e0:52:
6b:98:64:62:2a:70:5c:97:01:5e:fe:e8:08:fc:80:
a4:7b:c4:10:23:f3:18:fe:3b:1a:07:25:48:f5:5d:
d3:3b:84:ca:3c:cc:92:a6:90:1a:bf:05:64:7a:da:
06:05:27:1a:17:fb:e7:06:15:63:47:06:44:ff:9e:
73:ba:98:29:4d:24:9d:34:9a:1b:45:0d:6b:81:69:
f2:ce:8f:43:ca:ce:ee:a1:19:ec:29:6b:51:f0:5e:
82:ac:46:25:50:87:25:03:18:8f:e5:a5:06:65:28:
65:23:63:bc:43:a1:b1:99:96:c7:e2:db:37:91:74:
a1:20:bd:c8:df:51:13:64:d2:5b:f5:82:e8:49:52:
67:a2:7f:67:7c:1b:06:0d:54:1d:0d:36:e4:07:c2:
9a:1c:0f:c2:6b:98:f5:e2:3c:2b:45:18:a0:bf:50:
58:7b:4a:1d:6a:7f:22:f8:41:18:52:8f:4e:70:57:
ef:77:4b:6a:5c:c3:39:20:e7:45:3f:6e:34:aa:4d:
08:1d:8f:6a:89:82:c6:1a:1f:9d:9a:7f:4c:72:50:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.192.0/23
IPv6:
2001:df3:12c0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:d0:c6:42:cb:c1:81:14:9b:4c:40:66:17:b0:6d:16:b9:7e:
8d:ff:f1:8a:04:80:09:08:e8:79:78:9c:46:ca:3a:9c:f9:1e:
1a:01:21:81:43:56:29:18:26:f4:ba:bd:e3:be:2b:f3:79:e6:
b9:b1:2f:b7:e2:ba:64:bb:ee:2d:06:0e:b3:78:01:31:ba:53:
8d:7e:03:fb:e4:ca:72:27:fc:45:00:ae:6a:91:98:76:22:1a:
5c:0f:96:66:9d:9b:42:25:2d:0f:a9:dd:aa:00:81:81:61:2c:
cb:30:93:ab:29:be:a2:ef:89:a8:56:9a:5a:cb:05:52:95:4e:
2b:e5:b5:ef:fd:eb:ad:d2:d2:f7:96:d8:0d:56:50:c5:5c:14:
48:01:bb:b5:71:8c:63:3f:e9:34:3c:19:26:ef:0e:00:5d:40:
d1:90:c2:f0:78:6f:fc:f1:c6:a1:51:91:60:e4:22:65:f3:fb:
e8:65:f7:c1:c3:21:a4:e8:91:d8:48:dd:db:37:0a:f2:86:fd:
de:13:30:b8:36:da:ba:28:28:31:a2:8f:62:a6:60:10:d9:ba:
cf:f5:65:d1:ea:a4:6f:50:98:d0:67:59:66:9a:e4:3c:39:19:
ee:24:89:34:19:5f:a1:fd:7e:17:c7:bf:41:70:ca:e4:5f:cb:
58:9f:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:34:59 2024 by rpki-client on console-fra.rpki-client.org