Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer (raw, json)
Hash identifier: 2A1QbOkicuRsqyqs9yYfzqqZYqGSn1EVteZUee4i5Ew=
Subject key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F411
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 May 2024 23:40:40 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 10122
IP: 103.139.72.0/23
IP: 164.90.64.0/18
IP: 202.63.32.0/19
IP: 202.168.96.0/19
IP: 2404:efc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128017 (0x1f411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 27 23:40:40 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:70:35:01:1c:e4:67:52:82:1a:3a:a3:cd:
0f:c9:e5:38:9a:fa:41:1b:b0:c1:17:04:6d:39:f2:
1f:ba:be:6f:a0:35:e4:b3:36:a0:6a:44:07:14:c9:
3e:91:36:a2:24:70:3e:e2:9a:09:0c:7d:76:bb:5e:
0e:e2:d8:ee:c2:25:31:e8:da:64:ac:95:69:47:e7:
af:c3:49:f3:59:be:38:a8:62:88:27:9f:57:09:72:
59:e7:2f:f8:d4:69:e3:c9:63:a1:91:ef:f2:1c:3e:
01:41:71:4b:3a:09:f3:06:5a:0b:4b:f9:b1:43:9e:
79:03:ed:c6:66:6d:f7:5d:92:0f:a8:73:8d:aa:47:
f4:29:23:61:eb:a2:e0:f7:93:cb:7c:58:60:90:aa:
fa:97:6e:1a:5c:51:a2:c2:18:a1:da:c2:ef:1a:30:
0d:a6:f2:5c:34:99:0a:34:74:11:94:0c:96:0c:27:
8d:e7:be:08:8c:cf:3b:fa:ee:8e:68:b0:73:e9:e4:
70:74:a1:a8:48:44:94:99:30:26:1b:db:df:52:2d:
d7:c3:30:51:ac:00:a3:e0:4f:53:cd:b1:66:a3:a6:
d2:70:39:35:99:95:1a:c5:d2:23:03:c7:03:a4:d1:
54:0f:eb:18:98:fb:7d:ea:75:e2:cc:87:59:11:4c:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10122
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0/18
202.63.32.0/19
202.168.96.0/19
IPv6:
2404:efc0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:11:91:fd:ed:de:ef:66:67:d4:a9:a2:15:fb:5c:83:7d:64:
a6:10:ed:bd:3a:6e:43:21:d0:8a:5b:65:23:f7:55:02:48:bd:
0c:d4:82:9b:a7:f4:c3:87:66:b7:20:4b:56:79:b2:c0:a7:8f:
08:21:5c:c2:a8:77:59:17:77:11:0a:cc:bd:34:73:83:cd:1e:
ec:28:ba:b7:b9:ef:bd:fe:8c:a8:7d:03:33:8c:e1:49:c4:14:
93:7c:93:d4:22:89:98:4a:97:ec:5d:0e:87:8f:f9:0f:e7:b9:
52:c3:ec:d3:31:e8:60:3c:d6:61:02:68:7d:f9:25:6e:17:08:
22:ac:c4:7b:91:7a:d7:07:85:e1:fc:b5:13:ee:7c:8f:6d:79:
af:a1:02:ec:04:9d:71:8b:8c:65:9f:83:2c:7a:70:bc:d8:6a:
d0:9b:09:d1:bd:bd:76:7c:92:39:05:43:f0:7e:c5:6e:be:4d:
d0:d1:f5:8b:9c:a9:e2:92:03:59:a5:f6:bb:24:8f:e5:4b:53:
c7:89:0b:20:37:69:d8:fc:50:25:81:d3:c5:d2:c1:95:92:7a:
cc:14:34:f2:a5:94:38:14:b2:96:97:87:38:1c:5f:14:d3:e1:
24:6a:5f:76:b2:f9:24:fd:30:ba:22:09:47:e6:82:8d:c2:05:
30:95:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:32 2024 by rpki-client on console-fra.rpki-client.org