Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
File: B_MbR0cTs6FSxqX49I3tIJfcJB8.cer (raw, json)
Hash identifier: GUgNZrvsBZxvpoxVmnm7jFDauBivTxIlKZG/lQ2THoI=
Subject key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A9B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Nov 2024 02:50:47 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 138667
IP: 2001:df4:9340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137883 (0x21a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 11 02:50:47 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:99:fd:fb:7c:f0:f5:14:41:6b:1b:e3:3b:
f3:bc:61:78:d6:84:dc:5b:98:6e:10:40:c3:2a:be:
b1:c2:22:7a:35:a8:7f:6e:6b:fd:e3:72:13:a9:e2:
2d:8a:b2:fc:5c:2c:27:bc:db:66:c1:29:5a:cd:3a:
75:dc:a0:af:00:b3:7b:1b:09:72:ed:ff:61:3f:b8:
3c:f4:c7:0f:19:c9:a2:1a:69:9f:f0:cf:28:cc:76:
87:8d:85:85:bc:0c:93:ae:35:53:4f:54:21:68:fe:
fd:29:6b:db:7b:64:c0:c6:ac:e7:8b:e4:0e:3f:16:
4b:7d:ef:4f:1a:b7:4a:a9:c8:91:7b:01:96:f4:81:
6d:fd:23:34:70:6d:7c:55:bf:4b:3a:8f:05:c8:50:
41:19:02:d4:8f:4f:63:49:e8:09:8b:97:07:86:22:
80:a0:cc:4a:68:c2:76:42:89:5c:60:31:6c:c0:82:
a2:79:c4:61:3d:38:5f:bb:c1:60:50:eb:70:c0:a6:
92:d9:82:15:9b:67:cd:b2:28:f0:f5:73:df:be:f7:
d9:e4:47:68:b8:0f:b4:57:1f:c6:b7:57:30:5a:66:
45:30:ea:bf:64:74:de:0d:ad:33:f1:71:dc:c3:d0:
b8:00:a0:24:cc:eb:ea:17:78:77:fe:86:fa:bc:72:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138667
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:9340::/48
Signature Algorithm: sha256WithRSAEncryption
0a:92:48:8b:54:35:70:8f:d8:03:69:4e:60:f8:0b:57:02:f9:
ff:02:c6:65:84:af:97:a0:90:fa:00:9b:fb:26:f7:5b:7f:8a:
30:08:1a:ae:a7:dc:70:95:2f:5d:83:df:30:e3:53:73:a7:2d:
c6:b2:71:57:ca:47:48:72:ad:17:7b:63:4d:8f:87:8c:7e:08:
73:52:59:03:c1:8d:21:e5:7c:49:cb:b8:2a:02:55:37:b7:2c:
35:49:76:47:df:36:c4:7c:6b:17:9c:e1:53:d0:8d:da:c0:2d:
cf:66:14:0a:93:f2:e2:21:5f:7b:65:15:74:0c:a7:e7:db:4d:
8c:ab:f7:c4:0e:af:68:79:02:01:bd:61:9d:62:7e:c3:27:a4:
03:19:1d:af:1a:0c:0d:5b:7b:83:e3:6d:4c:71:05:ab:be:9a:
88:de:4b:c5:c5:b5:3c:f3:fa:16:06:85:19:ee:2f:cc:c3:94:
f9:30:82:0b:fb:0d:6e:e4:18:e1:a5:4c:63:74:db:0f:0f:5a:
39:77:de:84:61:fe:4f:62:74:f6:d6:99:de:ba:5a:2e:e2:12:
86:b8:a2:a1:93:88:c6:14:c8:2a:ab:2a:c9:95:ec:10:8c:53:
5c:de:25:97:4e:93:de:e7:c5:29:a2:d1:19:c0:d7:26:c4:a8:
0c:c9:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:09 2024 by rpki-client on console-ams.rpki-client.org