Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.cer (raw, json)
Hash identifier: eDt556HaXz6hB/H/8qnmXJd8GrKzgHDe9a6O4DlBhWI=
Subject key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E58E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Mar 2024 08:14:07 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 152458
IP: 2001:df3:7140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124302 (0x1e58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 08:14:07 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ba:2b:80:e1:8e:7e:93:30:a6:7f:4f:4e:
d9:e8:60:63:9c:a6:f7:55:22:d9:17:ae:e5:28:16:
0a:06:8c:f9:7f:e9:42:02:68:12:77:55:60:4b:82:
a5:cc:40:53:85:2f:37:19:a8:b2:6f:cd:ec:45:7c:
bf:51:e2:d3:a9:50:3b:2b:2c:aa:69:37:d8:08:94:
63:6e:85:5f:73:0c:6d:9d:43:26:f8:53:5e:2c:c4:
a1:a9:4a:9a:53:ab:87:8d:62:da:69:8d:e9:36:25:
b0:34:d3:54:57:e6:7e:78:40:f5:34:c6:7d:19:3b:
c1:b4:08:76:e3:19:85:9a:55:7a:cf:9a:18:72:5e:
21:8b:fe:c2:f5:05:07:4b:43:44:55:99:0c:f4:a4:
4a:f2:9f:19:16:71:e6:7a:85:2e:e6:5d:24:d9:2d:
49:de:8d:12:8d:63:90:e4:32:6d:10:e3:e3:45:1a:
48:a7:5d:9e:25:27:0b:45:f8:a5:b7:4f:11:61:3e:
d7:e4:e3:4b:bb:e3:66:ff:56:52:e6:3c:0f:0b:27:
0e:71:53:6b:ac:83:06:95:d5:56:be:58:65:97:50:
5b:48:d4:9a:7a:ee:4a:d5:3e:9a:f4:0f:ba:24:4c:
47:55:e2:46:ad:fd:ae:bd:af:49:53:d4:7c:f3:df:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152458
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7140::/48
Signature Algorithm: sha256WithRSAEncryption
d6:db:23:df:e3:82:70:fe:7b:ee:dd:ef:7d:c3:c3:13:12:6c:
5d:20:41:40:7b:77:28:02:c4:1d:6d:03:a9:8d:f9:fa:88:e2:
d2:c8:ec:50:68:c0:72:8d:8d:08:64:57:60:13:82:cf:85:b6:
78:b1:ec:bf:e4:f2:30:85:c2:c8:67:67:5e:e4:d8:98:de:cc:
8f:94:03:b6:a8:24:f6:dc:a2:16:9c:99:66:76:ec:6f:9d:ce:
9e:49:ba:84:0b:cd:e9:b5:22:2f:07:a3:da:5a:23:a3:e6:df:
42:7e:38:20:de:89:fb:31:f0:03:67:bb:b6:2f:42:72:3d:f5:
dd:13:3b:5d:22:1d:b4:d5:c5:7c:0d:23:7a:8e:78:2d:19:56:
b2:12:69:92:c4:e8:c4:2b:0d:a4:8a:46:e1:ec:7c:d2:de:3a:
d5:fa:86:60:33:ae:cb:15:d7:6f:b2:f1:00:1d:6d:ee:2b:8d:
d4:26:08:dc:63:97:94:f0:9e:e0:85:5d:d9:80:f0:4c:de:0c:
e1:e8:1c:c6:41:4a:aa:fb:a1:ec:96:83:d4:e4:86:47:aa:9d:
89:36:74:2e:84:0a:66:89:d8:b5:69:ab:a8:9e:66:34:4f:c8:
c8:29:ef:e4:2a:29:ba:55:78:b7:54:ea:63:a8:17:f4:9f:b8:
0f:7d:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:06:50 2024 by rpki-client on console-fra.rpki-client.org