Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
File: 8U1sPT3myxB096LpBdn4VFEEWmU.cer (raw, json)
Hash identifier: MEVcjbNzQ73Uh8+Oh6MRwThBMPWgWwroFa9gVLD3CTg=
Subject key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0218FF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Nov 2024 18:04:23 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.176.228.0/23
IP: 2400:36a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137471 (0x218ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 4 18:04:23 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:db:59:c8:e9:8e:28:7b:36:d1:9d:54:37:
cf:b5:f6:50:61:43:9b:03:82:51:63:8e:20:c9:b1:
37:3b:c7:52:41:8e:34:f6:da:99:9b:42:5b:d5:2d:
d4:ce:eb:5d:24:ad:90:8e:ca:09:a8:a0:98:4b:f7:
1c:8f:91:61:f0:47:78:76:07:e2:c3:67:cf:03:33:
a1:06:a0:08:e1:08:26:f9:dc:71:64:69:85:f6:3f:
8b:39:7c:18:0b:e5:04:de:44:73:07:e2:68:f4:9a:
30:00:e7:d7:45:60:dd:47:f5:d9:f7:95:89:59:b3:
86:8c:ef:04:06:9b:4e:43:7a:95:02:b2:27:e0:84:
74:6d:98:88:29:e8:56:4f:da:e2:b5:ed:27:bb:77:
67:46:0b:d8:c4:71:ff:8c:85:cd:19:6b:4a:b8:0c:
f6:ac:69:41:a1:85:4b:c2:a6:72:2f:15:0e:fe:c9:
31:7e:c6:0a:00:72:7e:dd:d4:e1:1a:f9:d8:6d:65:
49:aa:ac:41:48:06:09:c4:18:f8:14:98:c8:06:66:
04:0f:22:c1:2d:74:fd:b3:fe:d3:5f:70:bf:d2:73:
fa:64:45:b8:c9:ff:e4:3e:c1:f7:f6:5f:ba:09:39:
f1:61:c6:72:f1:1c:08:e6:2e:99:ef:c5:00:59:dd:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.228.0/23
IPv6:
2400:36a0::/32
Signature Algorithm: sha256WithRSAEncryption
43:a9:47:0e:f6:b6:a9:cf:10:b9:06:ee:61:17:8d:7e:0e:d6:
f0:2d:5e:69:c9:b7:d5:d2:66:33:df:2b:9b:1d:ee:d3:e8:f9:
42:0e:15:d7:cd:e5:f3:0c:83:b5:04:ee:c0:d2:7e:0b:9a:6d:
de:35:2c:b2:eb:5c:81:72:de:92:9e:26:1e:e8:a0:25:9d:0e:
46:01:13:de:a5:b5:8b:5b:dd:ba:98:b7:c6:d2:76:7f:8d:d8:
16:95:58:45:42:1a:95:91:ec:b2:ce:34:bd:f3:1f:3b:62:bb:
5e:19:2a:86:ea:97:7e:fb:88:c5:e3:8f:f4:28:00:c9:13:0e:
e9:ef:f1:9e:8f:31:8b:c0:37:ef:8f:e1:d3:ae:40:6a:81:d3:
f6:40:01:74:85:d7:73:07:7c:01:13:0a:51:9b:36:55:f8:c5:
ff:14:5c:2e:9a:a6:d0:22:81:b6:2e:ec:e0:74:7d:6a:6e:88:
bd:e2:b3:fa:80:56:52:a5:d5:b5:9c:51:97:f9:8e:c5:6d:1d:
12:9c:ea:97:64:da:a8:cb:92:4b:c6:d8:55:a6:ff:44:41:9d:
3d:7a:37:0a:cd:7e:03:4d:fc:bf:38:9c:af:10:a6:90:55:ef:
0d:9c:0a:53:6b:a9:cb:3e:c8:a6:6d:4a:26:30:73:45:97:c4:
3b:46:0c:c4
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAhj/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNDE4MDQyM1oXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJF
OTA1RDlGODU0NTEwNDVBNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdm9tZyOmOKHs20Z1UN8+19lBhQ5sDglFjjiDJsTc7x1JBjjT22pmbQlvVLdTO
610krZCOygmooJhL9xyPkWHwR3h2B+LDZ88DM6EGoAjhCCb53HFkaYX2P4s5fBgL
5QTeRHMH4mj0mjAA59dFYN1H9dn3lYlZs4aM7wQGm05DepUCsifghHRtmIgp6FZP
2uK17Se7d2dGC9jEcf+Mhc0Za0q4DPasaUGhhUvCpnIvFQ7+yTF+xgoAcn7d1OEa
+dhtZUmqrEFIBgnEGPgUmMgGZgQPIsEtdP2z/tNfcL/Sc/pkRbjJ/+Q+wff2X7oJ
OfFhxnLxHAjmLpnvxQBZ3UR5AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU8U1sPT3m
yxB096LpBdn4VFEEWmUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYyMDg5L0UxQzRBNDFFNENFODExRUNCRDA1RkE3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQz
bXl4QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnsOQwDQQCAAIwBwMFACQANqAwDQYJKoZIhvcNAQELBQADggEB
AEOpRw72tqnPELkG7mEXjX4O1vAtXmnJt9XSZjPfK5sd7tPo+UIOFdfN5fMMg7UE
7sDSfguabd41LLLrXIFy3pKeJh7ooCWdDkYBE96ltYtb3bqYt8bSdn+N2BaVWEVC
GpWR7LLONL3zHztiu14ZKobql377iMXjj/QoAMkTDunv8Z6PMYvAN++P4dOuQGqB
0/ZAAXSF13MHfAETClGbNlX4xf8UXC6aptAigbYu7OB0fWpuiL3is/qAVlKl1bWc
UZf5jsVtHRKc6pdk2qjLkkvG2FWm/0RBnT16NwrNfgNN/L84nK8QppBV7w2cClNr
qcs+yKZtSiYwc0WXxDtGDMQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:12 2024 by rpki-client on console-fra.rpki-client.org