Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
File: 8XD1e07KEpakIh1wemTkKYk7h9Q.cer (raw, json)
Hash identifier: MKXE73KrOfyMCdG+zPp5HLqN7I5pEUDVgVRNaMMpPo4=
Subject key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD1B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 18:58:39 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152117
IP: 36.50.2.0/24
IP: 2401:5260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118043 (0x1cd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 18:58:39 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:0c:4a:3d:df:f7:a7:84:82:83:5d:3e:c8:
11:83:31:ed:1d:88:76:c0:a6:2b:ce:dd:af:c9:8d:
eb:8f:59:d3:9d:52:c6:4b:cd:13:f8:8e:fc:d8:e3:
65:3d:5f:ac:8c:7c:29:ba:08:49:19:2a:af:5f:ee:
1f:a7:61:af:8d:d6:4b:23:67:78:e5:94:de:d6:be:
3d:86:2b:f1:42:4f:44:34:cb:83:eb:a9:d7:96:67:
fe:ac:ea:65:5e:d1:74:64:51:dd:66:90:33:0a:61:
78:f4:60:fe:9e:87:b5:68:89:97:fd:10:4a:b7:33:
aa:27:4c:a4:00:e2:8c:22:6f:2f:f4:90:e9:da:59:
75:fa:5a:94:6c:d1:bf:60:04:c7:0b:ef:e7:79:6d:
16:d8:41:bf:cf:21:4e:50:2a:96:e4:6f:48:1f:8f:
4b:1d:86:ea:bc:53:c1:c3:ed:e0:d8:e0:b8:c7:9a:
eb:2a:dd:79:5b:9a:35:f7:ae:ac:c5:c9:15:9f:8e:
52:63:82:b8:48:13:a1:ae:d7:73:9f:d4:4d:c8:69:
97:12:eb:d4:5e:c1:36:ea:32:e4:59:9d:e3:89:ea:
c7:db:0a:17:3f:71:4e:af:60:25:4f:01:5d:bd:9b:
cf:f8:9d:df:bf:1f:6f:dd:62:f3:5b:7b:d9:c8:8f:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152117
sbgp-ipAddrBlock: critical
IPv4:
36.50.2.0/24
IPv6:
2401:5260::/32
Signature Algorithm: sha256WithRSAEncryption
97:f2:b2:49:28:00:4a:d6:fb:37:3c:ed:0c:b9:4f:c2:e1:c2:
02:2c:60:5b:62:c2:e2:5d:0c:7c:35:73:a3:29:3f:7b:ea:3b:
ef:be:fa:d3:8e:81:48:92:d6:ec:38:61:18:97:43:30:92:12:
5a:c1:6a:95:6e:bb:7e:4c:49:01:2a:60:f2:9c:59:5a:94:35:
83:64:d8:9d:87:75:97:da:50:b2:75:39:72:5a:68:f4:e2:38:
c2:9f:41:79:b2:81:a5:e6:65:e3:e9:e0:fc:b0:ac:d9:b8:a9:
45:82:f7:bb:4b:e9:4a:5f:e3:b7:8b:a4:63:35:14:74:3c:11:
18:6e:5a:96:e1:94:41:b8:c7:08:ce:63:ef:a9:c0:82:f0:aa:
be:56:dd:02:5e:e0:64:75:03:e7:1a:de:53:0e:86:69:a7:6b:
ed:bb:2f:34:8d:91:b6:18:e1:01:d5:9b:3f:e0:54:e9:01:88:
7c:90:7a:5a:8d:2f:f2:91:bd:6d:d1:d4:67:b5:41:80:f6:f3:
41:9f:df:78:35:c8:6b:d6:2e:05:f3:cf:5c:f4:63:29:2b:bb:
fd:f2:12:76:91:5d:40:1f:42:97:aa:ea:0f:28:9c:81:4f:b7:
77:7a:b7:41:5b:f9:e5:e8:44:d1:50:ba:a1:9f:e5:6d:f0:7e:
50:91:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:20 2024 by rpki-client on console-ams.rpki-client.org