Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer (raw, json)
Hash identifier: ognomIDcFNVR2dgM0r2I8dPGPwoIAOSB+m2foXo2g50=
Subject key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F225
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 May 2024 21:39:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 132694
IP: 103.18.92.0/22
IP: 2406:7700::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127525 (0x1f225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 15 21:39:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:d1:eb:f0:6a:5c:77:0d:87:9d:36:bf:a3:
21:cb:24:f1:9a:fb:55:26:60:a1:6c:7e:95:f5:9d:
ae:57:4d:ff:36:df:7c:64:5f:65:d0:d7:3a:45:6f:
d9:3b:40:7d:2f:43:4c:d9:cd:37:6f:9d:fc:0e:1a:
f0:c0:df:2a:f7:ce:7c:57:13:ef:f0:c3:c9:c7:cb:
eb:5d:fa:0a:80:2d:7e:b4:f6:c8:22:c2:f7:1b:c3:
c4:1a:7b:b6:91:ad:9e:27:f0:45:08:51:f0:bd:4e:
d0:d0:12:8a:d8:9d:d8:e1:6a:60:3d:04:e0:cf:1b:
1e:df:b1:1f:49:fa:75:b6:46:c2:a7:ee:63:ad:99:
cd:ad:c8:47:fc:a2:4f:36:65:9c:69:fa:29:61:d4:
63:bd:bc:54:ce:a4:80:d2:82:51:f0:9f:dc:d5:7f:
f1:fa:0a:82:9a:29:72:a4:2c:2a:95:94:10:41:7f:
b4:4d:9b:06:22:19:89:92:7a:00:ff:f1:cd:08:b7:
85:25:21:63:b6:d7:e2:8c:cf:14:ff:ee:ee:65:6d:
aa:09:45:58:39:05:48:39:56:0c:06:ac:51:58:ba:
4e:93:91:58:b6:89:c6:cd:79:30:7b:72:5d:3d:04:
cd:e8:81:f4:60:c4:b8:1e:be:0c:29:36:cf:a7:b0:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132694
sbgp-ipAddrBlock: critical
IPv4:
103.18.92.0/22
IPv6:
2406:7700::/32
Signature Algorithm: sha256WithRSAEncryption
bd:9c:14:f6:35:f9:63:9b:85:04:43:a0:93:cf:72:d3:31:be:
64:4e:5a:2b:25:1d:2a:6d:24:7a:57:bc:bc:f3:80:a3:d2:da:
13:a8:c3:01:20:64:d4:30:08:29:12:ce:78:eb:b1:95:c7:bc:
af:c5:6c:58:c7:1b:cc:34:a7:17:52:a9:62:8c:66:b3:91:eb:
7a:3a:8f:30:2f:bf:c9:84:14:c1:df:67:89:d3:52:0f:10:31:
cf:7e:c7:cb:6d:e6:35:5d:05:b2:b2:c3:79:3c:26:48:45:3e:
e0:8f:69:25:c5:ac:8a:42:24:fc:0e:01:60:e1:bc:b6:0d:79:
04:ba:62:25:54:d7:44:db:f8:8e:ad:61:13:ab:8f:98:9d:1a:
7b:d7:c0:f1:f5:c7:67:ee:54:c0:9e:21:fa:6f:92:fb:88:47:
3f:50:de:d6:c9:71:1f:1f:f0:0e:83:e8:f9:c1:28:79:5d:69:
06:7c:50:1f:51:5b:b9:05:b8:4d:18:94:5d:d8:3d:d8:07:3b:
09:ed:07:fd:04:da:ae:16:fe:86:01:6e:3d:c9:cf:8b:f3:de:
3c:30:b2:9a:11:d9:70:11:29:68:be:76:3f:6b:f8:55:70:04:
e8:66:5f:ed:ff:d6:79:ac:3c:85:b6:7d:9f:7e:e3:f7:10:6b:
6e:ca:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:18 2024 by rpki-client on console-ams.rpki-client.org