Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer (raw, json)
Hash identifier: amDu0P3RBBh3NHNkQT6zpvKDLK/gllq9aee6AdukFG8=
Subject key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021888
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 11:51:26 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 151953
IP: 203.19.5.0/24
IP: 2001:df3:640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137352 (0x21888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 11:51:26 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:78:82:8c:81:b2:a3:d0:fc:8e:a4:d7:5e:
fc:0d:03:2f:01:f6:e8:a9:07:c8:43:bd:5d:7e:a3:
c4:9d:59:b6:67:6e:9c:e8:d4:0e:f7:e7:a4:f7:89:
0f:d3:35:37:46:8e:fe:b9:20:aa:2f:72:cd:4d:47:
78:cb:e4:19:af:0f:fe:06:62:64:17:4d:f2:01:b3:
e8:dd:1e:96:0c:0d:2d:43:ad:2f:5f:21:9c:fd:dc:
6a:ce:fd:49:84:d5:9d:25:2c:af:76:11:7d:c3:7c:
4f:9b:d3:2e:bb:e6:bb:cc:51:dd:9a:63:8b:08:80:
f7:cf:5b:a9:60:62:7d:17:cf:23:e8:a5:c4:84:e0:
5b:5b:01:e9:d4:e8:1e:29:a9:f9:57:ed:ab:03:8a:
c3:15:ec:2a:a1:0a:88:d7:e5:fe:7b:0e:ce:9b:f9:
83:96:9f:37:5a:f4:5f:95:86:8c:96:df:50:35:ea:
b3:d2:e9:2b:60:4f:a7:ab:00:4c:11:d6:52:9e:11:
4b:4b:d0:09:46:26:0d:46:f6:98:c4:81:30:13:b7:
dc:48:ac:62:fd:87:1d:98:43:58:c7:99:ac:eb:47:
38:1d:ab:52:57:90:f7:b5:a9:fb:78:72:75:0f:45:
3e:c2:e7:74:41:02:76:ca:ce:26:53:52:34:41:35:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151953
sbgp-ipAddrBlock: critical
IPv4:
203.19.5.0/24
IPv6:
2001:df3:640::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ab:a4:58:a2:37:1a:01:b8:20:29:c0:91:61:0a:0f:91:1f:
e7:1f:bc:1b:87:df:98:5d:f3:96:65:a4:fd:5a:24:27:f7:95:
ae:90:0a:50:80:50:a5:6b:8f:b6:7c:8d:54:77:e4:f6:13:79:
5c:84:8a:7a:a0:b0:f8:39:4c:ae:44:f7:e6:f4:fc:43:1e:f7:
84:0f:af:5d:3d:be:d6:79:ed:ae:ed:a5:fb:ca:32:c0:b3:46:
ad:5b:5c:d3:70:64:1c:35:3d:13:bc:45:aa:c6:47:90:22:64:
60:2e:cb:d9:75:26:2a:4e:ec:58:d8:6e:fb:5a:2c:93:a1:22:
cb:74:4a:ee:80:e7:74:c9:14:80:11:8b:a9:97:9c:8a:7a:ed:
60:51:63:2a:74:f4:96:0c:f6:fc:e1:e3:b0:9d:c0:6b:5e:c0:
b6:ca:83:7a:5a:e8:f2:d1:62:6e:1e:29:65:07:97:96:66:3c:
ae:e6:80:01:bf:ba:7f:a2:e0:18:b7:3a:4e:da:9c:b8:8b:25:
e5:df:f8:bd:16:80:10:7a:f7:fa:d4:86:27:0a:45:75:b3:87:
c9:d7:79:83:49:3c:64:36:d2:b2:79:d7:4e:87:86:b5:c5:c6:
01:14:1e:e1:16:f5:6b:4d:14:dd:a0:0c:4d:93:53:a1:b9:77:
9d:7e:99:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:17 2024 by rpki-client on console-ams.rpki-client.org