Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer
File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer (raw, json)
Hash identifier: zdwOwPXpNg9XqAN/Ksh0tKFrfEPh8G7UN3jG2U25DHg=
Subject key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020FB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Sep 2024 14:50:36 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 55775
IP: 203.9.58.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135091 (0x20fb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 26 14:50:36 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:09:dc:14:63:df:64:71:ac:6a:47:f9:d3:
61:58:99:56:dc:d5:39:f8:b8:54:1b:a0:ee:92:8c:
0d:19:c6:0b:4c:04:7d:6a:34:ba:23:f5:1e:6c:b0:
37:16:1d:16:29:9f:4c:05:44:2d:e2:e6:d2:d0:d6:
35:72:f5:55:df:24:2a:93:a8:45:2e:03:cc:71:af:
3a:0f:b4:5a:63:9c:8f:ab:0c:c4:9c:99:20:d0:07:
b2:68:e0:e4:e4:7f:53:7c:f2:a4:26:03:ee:81:7e:
d7:b9:19:6a:f3:40:6e:c1:92:a2:e5:7b:9b:f9:d3:
f7:07:5c:3f:06:24:68:82:c7:0b:6c:01:58:8d:60:
38:71:e7:64:99:dc:f7:76:3f:ec:33:88:0a:9b:12:
08:35:76:51:47:6c:a5:4e:59:a6:3a:cd:1d:be:93:
09:89:df:1a:a1:58:df:86:f0:7a:2b:ab:29:d4:d0:
d2:9a:f6:a0:0d:a2:a4:18:69:01:e4:c1:7e:03:f2:
6a:7c:5b:1d:db:36:2a:83:be:90:be:f1:14:54:49:
52:88:fa:12:bb:16:3c:dd:42:f6:d4:75:d7:22:09:
8d:28:46:81:98:95:6c:1f:0d:19:ee:15:91:17:c5:
ec:bc:a9:ab:d5:94:49:02:a8:8c:52:9b:ad:cc:ca:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55775
sbgp-ipAddrBlock: critical
IPv4:
203.9.58.0/24
Signature Algorithm: sha256WithRSAEncryption
00:71:54:bf:ec:3a:aa:c9:9c:b6:0b:8d:b2:31:4b:86:4f:10:
6f:fa:61:4f:c6:9f:e5:ba:30:41:10:dc:43:42:a8:a5:91:c3:
4a:2e:b0:6e:09:1e:23:80:82:c1:07:c2:db:41:35:bc:9a:2e:
b4:ac:f7:a3:0b:39:52:c9:76:43:20:78:31:29:1d:44:15:5a:
b9:bf:bc:02:59:09:28:3b:c3:5a:4b:71:cd:6f:ce:7b:4c:c0:
47:ff:eb:0d:e3:86:23:89:f7:7c:02:25:83:21:8c:7d:e5:13:
b8:88:54:c0:0d:73:23:4b:66:74:6e:55:e7:e5:49:96:a7:0d:
b9:7f:53:cd:26:bb:7d:dc:da:f8:07:92:7d:75:0c:6e:52:fc:
27:79:2a:34:16:51:77:35:0d:88:31:df:b0:4f:1f:23:90:8e:
a9:01:e1:08:99:01:a6:ea:bc:a4:c7:7f:c9:1d:43:67:6b:b4:
70:db:25:2b:5a:d2:8d:d3:d8:32:62:97:c4:c8:0a:f8:23:5a:
a1:9f:87:5d:7b:de:cd:6b:aa:c5:3c:00:7b:78:65:2c:7f:88:
c1:6c:76:1f:99:2d:26:40:5f:f1:16:48:f0:f6:d9:d9:06:f8:
a7:26:77:31:50:ff:4e:c8:86:4f:00:56:9b:81:d3:79:e6:f8:
7a:97:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:10 2024 by rpki-client on console-fra.rpki-client.org