Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.cer (raw, json)
Hash identifier: 3s5pUnPlHdA4UCQ1HzgYht7L4NIM4iThTnvyhrObeQk=
Subject key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CB10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Nov 2023 02:14:01 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 203.34.235.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117520 (0x1cb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 15 02:14:01 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:6e:e2:f3:5c:4d:86:a9:1e:fb:bd:70:d0:
6c:f8:8d:42:36:52:a0:ec:ba:ee:92:ea:88:32:b6:
20:ce:9a:3b:33:c0:09:59:6f:10:1c:b5:93:2f:04:
9f:b3:1c:9c:c1:f0:60:64:39:4d:cc:74:5e:c2:68:
64:e3:e1:b0:09:71:42:14:3a:69:39:63:d3:7f:b9:
a8:3b:17:a9:df:67:bc:a8:cc:eb:92:73:3e:83:9e:
54:85:f9:a8:ae:e6:8c:bd:2e:5f:c7:2f:d6:c2:e9:
19:27:36:f8:ed:a9:1c:b2:13:7b:ad:64:15:54:e1:
57:21:22:ec:84:fc:54:4c:79:db:f9:df:46:60:34:
83:08:10:48:d0:98:0c:f3:44:18:7a:cd:36:1e:09:
51:20:42:21:d2:90:a0:ab:d1:22:f2:e0:8a:c6:1e:
55:f5:07:de:de:a8:3b:3b:e1:11:e3:91:9e:50:5a:
4d:07:37:84:4a:af:48:c5:26:ff:23:9f:fb:85:d5:
33:cf:02:b8:9f:9e:56:8d:e9:82:fb:b2:07:72:98:
71:54:71:8a:de:db:b6:ab:54:e5:f0:52:7d:31:b6:
2f:46:42:f2:ef:a3:e7:06:22:17:4a:5d:be:b0:08:
02:f4:24:8b:c9:d3:8e:7b:d9:a3:bc:1e:bb:ee:fc:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.235.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:cd:83:41:02:1a:bf:13:0e:33:5f:19:fc:f3:5c:90:1f:f4:
66:10:42:da:8a:4d:a8:5c:fb:78:2e:13:d0:4b:67:cc:d9:97:
54:d8:77:d0:fe:65:51:6b:17:25:79:1c:a1:34:7a:9b:cb:04:
70:68:07:37:1a:9f:09:19:a8:23:29:69:13:15:89:04:68:50:
3b:62:c2:9c:2c:63:da:9e:62:86:57:65:6d:d0:1a:e0:a7:78:
fe:0a:5e:a4:0a:2d:89:21:e6:62:62:fe:e9:d0:94:f3:32:9c:
27:3a:bb:c3:0e:77:c7:61:2d:63:0b:76:20:98:2e:57:5a:93:
5c:10:f0:14:40:00:48:f0:99:fd:3a:10:d3:74:0d:3f:51:50:
6a:b3:a3:11:fb:cb:ac:e5:91:04:ec:f9:6f:76:b2:70:b8:a5:
c1:f4:03:ec:4e:f2:2b:b6:a6:33:cc:1c:4e:64:8f:57:60:52:
be:0f:4c:56:75:4d:a6:eb:b9:d2:a1:12:c8:f5:f2:ef:e1:3f:
46:46:25:cd:5e:9a:f5:2c:f0:fb:48:76:bc:87:07:72:22:bd:
a0:f3:57:fb:76:3d:c5:46:ea:38:ce:fb:15:5a:5f:0d:19:88:
2f:1f:a2:4c:fc:cf:48:6e:32:a4:f5:41:6d:2a:57:0f:30:ec:
c1:f6:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:05 2024 by rpki-client on console-fra.rpki-client.org