Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.cer (raw, json)
Hash identifier: ZOp9bxTZB2yxbZ4+A5eaVdQXRGHx3km78y5msjxl1lY=
Subject key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Nov 2024 19:00:04 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38286
IP: 122.252.176.0/21
IP: 2401:cb00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138040 (0x21b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 13 19:00:04 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E15EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:e7:72:5a:1f:91:5a:e8:8e:86:89:f3:2a:
ea:ea:e7:23:fb:65:0d:7a:56:dc:df:ce:23:09:cf:
ff:ed:b8:55:24:31:d0:ce:44:ba:29:75:05:ab:db:
62:35:5d:a1:78:22:d4:09:db:ee:ae:de:aa:ae:b4:
06:9d:ec:22:5f:c6:63:4e:0c:52:6b:c5:c2:14:1e:
4c:72:97:4e:51:16:72:66:66:68:66:a5:2f:92:a5:
03:1e:55:68:30:c8:ba:61:0e:6a:98:4e:48:15:cd:
53:1b:af:c3:96:a5:e6:21:a4:b3:8f:4f:b3:7e:14:
a2:e5:eb:8a:c1:71:26:3c:64:6e:22:96:e8:81:0c:
1c:5d:ae:40:ab:9b:cb:c5:cb:b5:12:ba:47:72:72:
d1:91:06:ae:7a:95:b1:a8:8e:b1:5c:3e:a9:89:43:
33:ea:14:da:4f:b6:a9:32:d3:7e:0f:20:7d:af:43:
d2:38:33:72:84:48:91:40:dd:e4:12:7b:68:97:3f:
98:78:5a:3b:7a:1a:09:c8:47:85:59:6c:d8:ee:42:
cc:8b:42:f3:cb:32:bf:52:7a:f3:61:19:04:a6:98:
e3:06:57:7c:00:42:23:10:97:8a:17:a8:1e:3d:c9:
21:4f:1d:04:bc:9c:1d:aa:98:18:2f:f8:65:90:ed:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38286
sbgp-ipAddrBlock: critical
IPv4:
122.252.176.0/21
IPv6:
2401:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
19:cd:0c:3d:17:95:25:5b:8a:ed:71:bd:f5:28:c4:5e:8e:7d:
35:34:6d:0d:21:7d:0b:4d:fd:86:2b:8f:ee:1f:3e:48:2b:f9:
e0:fc:a8:21:e5:53:e8:d1:ba:54:db:31:6f:71:1d:9b:45:d9:
a1:e8:9e:4e:2b:9f:94:43:4d:c2:fc:72:dc:14:30:34:79:8f:
31:40:0f:30:b4:f8:32:f7:b4:9e:84:ce:92:e4:b3:2a:2d:4f:
f4:47:9c:88:b6:2e:1f:e5:3d:12:77:6d:26:12:04:93:56:49:
8f:42:94:7e:d2:41:52:58:e8:a3:6c:6b:7d:c0:c3:56:34:4a:
20:84:41:b7:42:46:76:72:80:cc:6a:e9:d2:9b:05:d2:14:eb:
65:3c:ea:57:53:c8:1f:92:23:00:27:4d:e0:72:9b:00:39:d5:
e5:58:a4:bb:5c:31:0b:d9:56:c7:b2:29:d2:3c:19:41:e0:b9:
7d:36:0d:cf:df:bd:40:9b:89:30:26:ff:d4:12:a2:43:48:2a:
ee:7d:36:fc:7f:b9:91:5f:23:f9:43:f0:7d:62:63:70:af:e1:
ec:3a:71:05:30:20:22:9e:67:f1:f5:20:84:93:e0:e6:e0:4e:
f5:12:59:f6:d3:2f:0c:b3:d9:06:a5:b3:ea:8e:b9:08:63:12:
be:fb:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:00 2025 by rpki-client