Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_vUy5tYrAgtPzgph6WXpYyWupE.cer
File: 6_vUy5tYrAgtPzgph6WXpYyWupE.cer (raw, json)
Hash identifier: Hx/Z4fl3k5cZzNJvPqJYAVo74PVv+LikxiMPTWjWh2g=
Subject key identifier: EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02122D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 07:05:59 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 142165
IP: 2401:bfe0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135725 (0x2122d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 4 07:05:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91EFCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:28:97:bf:d3:ce:b3:99:14:73:7d:e9:23:
6e:8c:4e:a1:7e:36:ea:ce:c9:cc:09:a4:40:81:47:
21:6d:2c:ce:3a:6c:b1:1c:8a:5d:24:b2:53:3b:56:
14:98:2f:46:0c:f0:c5:f7:79:90:4f:e7:20:28:e6:
ae:79:cb:50:ef:dc:86:a1:c6:08:ff:cb:c9:41:6a:
42:73:ea:00:e7:10:2d:09:4e:40:23:29:6d:d7:05:
07:1d:46:e5:86:30:e6:24:73:e5:34:04:80:ab:5e:
ae:10:9c:6a:d7:19:a4:5a:76:59:45:01:90:85:f3:
46:02:8b:ab:d0:d5:a9:28:a5:5c:79:dc:bb:b6:96:
84:8e:d1:57:68:7e:d4:06:ee:b4:fb:08:69:78:3f:
4d:95:f2:cf:a5:b8:ae:0f:25:1f:1a:b1:07:25:67:
70:66:f8:05:dd:67:81:d0:c1:e1:38:b4:78:e2:29:
c1:99:e0:ea:5c:f3:b7:ec:dc:ef:59:9b:2c:a7:7f:
03:99:ad:01:83:6f:b5:28:99:9e:ca:ed:e9:fc:d4:
af:70:68:69:a8:5d:27:2b:bf:33:3d:28:56:0c:f0:
d5:46:a0:f4:7a:ab:78:dc:61:7b:1d:0b:c8:e6:30:
ab:78:94:5e:ee:b0:5d:69:ed:dd:a0:b6:14:5a:9e:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:D4:CB:9B:58:AC:08:2D:3F:38:29:87:A5:97:A5:8C:96:BA:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/18ACE3F6821F11EFA1DB4C75C4F9AE02/6_vUy5tYrAgtPzgph6WXpYyWupE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142165
sbgp-ipAddrBlock: critical
IPv6:
2401:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:9f:5f:26:9b:97:88:71:59:ee:9a:a9:6c:70:24:de:6c:0a:
aa:6a:a3:7d:53:3a:e6:4c:ed:df:99:52:06:16:f3:00:47:00:
57:f4:ed:b0:03:94:f7:5d:67:ef:ae:4d:23:44:56:7c:6b:05:
21:6a:1b:34:9b:1f:30:57:b8:7f:ec:b0:bc:53:29:4b:5f:95:
90:3d:91:17:8f:67:18:4f:a8:5b:70:ca:1f:84:2c:17:4e:49:
a1:21:1a:7c:cf:e3:bf:c8:da:54:60:4f:e9:f1:22:c8:c0:81:
4b:56:42:4a:10:37:9c:1e:78:7c:79:20:27:27:a1:5e:6f:55:
1f:68:83:ac:70:72:74:2e:c8:7b:97:1c:e5:58:86:1f:85:5d:
3d:88:9f:3f:97:6e:77:30:3b:22:ee:5d:1f:66:d9:21:49:4c:
81:b5:13:09:96:82:0b:81:b7:77:c3:dd:8a:af:4b:99:97:da:
61:a0:34:0d:63:d7:ed:c2:ca:22:7d:aa:75:1b:6e:14:3a:4e:
b6:c1:44:fe:4e:bf:43:4a:20:76:7f:a3:24:6f:fd:7e:58:00:
ae:3b:9e:19:46:e1:d2:2e:70:a9:41:e9:32:49:e3:75:c4:e5:
0c:60:c5:15:2b:6a:b5:ff:24:5c:fc:f1:44:b7:7c:65:b5:de:
0b:2c:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:34 2025 by rpki-client