Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer
File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.cer (raw, json)
Hash identifier: kT9bWEYWLGu+sSmJ2/jO+jctm1/zrbT0NKlGeIV2ftQ=
Subject key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0228C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 Jan 2025 11:01:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 153491
IP: 2401:e6e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141504 (0x228c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 12 11:01:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9114EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:e2:b7:a2:5e:71:70:b0:5d:36:ac:2d:0a:
39:bc:f2:96:ae:c2:10:0c:b3:a1:59:83:41:90:ef:
02:e8:d5:3c:7d:14:f0:5a:dc:2c:3c:7d:a0:18:4f:
d1:55:2c:1b:ae:f9:af:63:93:66:27:0f:32:b1:ee:
8d:8d:b6:10:54:63:90:e9:a6:0b:e6:8a:b4:12:f4:
fa:50:49:1c:f2:e9:4c:4b:4a:0a:17:e8:df:b0:a7:
70:e9:5a:25:e1:51:a2:c2:69:93:d4:89:72:da:01:
77:b1:5b:ad:e6:4e:b4:c1:ef:ae:44:73:2d:80:00:
46:66:ff:50:ca:df:5b:f4:ec:04:d2:02:5d:c0:48:
3c:f8:aa:e6:bf:14:75:87:b8:4a:6b:c6:5b:54:d4:
ed:7c:30:59:b4:4c:d5:88:85:f1:13:c4:85:4b:c9:
6f:06:6b:96:57:c2:42:da:20:92:2a:a8:97:76:2b:
a9:cf:7d:73:d8:9d:47:af:5c:0f:60:22:ba:9c:f8:
81:4e:91:d5:96:90:85:98:e1:e4:e4:f2:99:06:03:
16:1f:b5:76:79:15:a7:31:bd:05:a8:2b:3a:17:d6:
40:54:97:d2:60:3a:5d:5e:3e:84:62:39:d6:a3:93:
c1:ec:eb:1b:e3:47:a4:5e:72:b8:82:a8:43:df:8f:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153491
sbgp-ipAddrBlock: critical
IPv6:
2401:e6e0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:d6:b9:27:4f:bb:0c:3a:8a:80:41:5d:d3:d2:bd:dc:cb:7a:
e9:09:e8:ca:3e:06:14:81:22:53:14:42:32:9b:dd:86:89:1a:
f3:d6:9b:ab:db:b4:e2:24:c0:09:8a:68:a1:fb:5f:f4:89:09:
28:d8:f1:a3:1c:d1:78:89:40:36:4f:d5:2b:20:c5:d7:92:49:
6f:7e:41:2a:9f:5a:a7:2e:80:f1:36:89:2c:b4:3f:b8:b1:21:
4e:0b:37:63:cc:34:b8:7a:96:ac:1a:88:9d:68:15:9f:07:78:
73:cc:44:34:fa:36:5c:25:97:19:4f:8f:aa:ec:8b:3e:e9:33:
8b:17:4a:a5:11:d1:5b:60:55:d0:80:10:eb:d4:1f:d4:8a:fa:
75:b9:88:96:0f:0d:42:be:17:ca:72:b5:59:a1:15:e9:80:2c:
3e:8d:43:2a:89:b6:f5:d9:5b:92:e3:a2:62:ad:7c:8b:20:8c:
fa:7d:49:0e:12:50:0b:23:09:68:34:78:02:83:fb:42:94:5a:
ac:e6:a1:2e:7c:05:a1:99:36:da:02:f8:ab:50:b4:39:67:66:
37:6c:19:e0:56:08:06:ae:50:9e:0a:1a:bf:d0:ac:78:ae:53:
c5:45:9f:35:35:71:df:14:95:ad:a2:a8:56:c7:31:af:91:17:
a8:66:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 07:14:38 2025 by rpki-client