Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
File: C99de_bArcNvIwEoNtjC3CQnkzw.cer (raw, json)
Hash identifier: dIHUqMZJ91yslLMtIIdQLE8B+V/ssQcu5UZugSp72MY=
Subject key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 20:44:00 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 43.251.8.0/22
IP: 103.42.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137838 (0x21a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 20:44:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f4:56:47:62:23:13:d2:76:81:c0:6a:65:
5f:d2:66:84:c7:0f:b5:85:09:70:dd:c4:02:8e:99:
7e:f1:11:d1:8f:d6:7e:df:6e:36:06:55:a2:a7:0d:
1c:b3:21:9d:b2:5f:c6:9f:ca:a3:c2:b1:0f:16:f7:
04:09:87:2e:f4:39:eb:00:7d:03:3c:01:e8:52:4b:
1e:0b:5e:9c:38:61:89:57:34:dc:80:b2:1f:bb:f2:
94:fa:f3:9f:91:98:49:58:0f:cd:29:0d:0a:7e:88:
99:46:49:b0:76:4a:99:18:86:d5:1a:fe:68:da:59:
22:2b:84:12:f9:ea:fb:96:03:59:85:50:18:da:b2:
7a:5c:e7:bf:a0:03:74:e0:9a:83:00:b0:5a:38:88:
b8:d5:e8:98:83:1e:64:85:8e:8d:8b:3e:3c:29:82:
4e:1d:4b:76:a1:0a:1e:39:c4:6a:45:fc:b1:b2:1d:
54:4f:28:c3:7e:db:cb:6e:1c:f4:44:f9:78:48:69:
87:f4:ca:4e:ec:08:fd:23:0c:de:1b:2a:5d:b8:79:
96:9b:7a:6a:82:7e:f5:3b:c0:f9:5d:a4:aa:67:33:
8b:9a:db:13:a6:9f:ed:55:8e:7f:0b:4f:2a:b7:4f:
9f:c9:b3:1f:8e:82:bd:ba:21:05:7f:06:8a:6c:36:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.8.0/22
103.42.104.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:7d:90:df:01:8c:5c:55:43:ed:e5:06:39:84:f5:c4:47:a1:
78:3d:e0:0e:ee:02:81:44:a2:99:c9:58:52:79:ed:df:2f:74:
8e:0a:a5:01:2e:cd:b6:ca:f8:a0:28:c7:f7:ad:55:85:3a:9a:
17:4f:e9:b0:00:76:81:f7:2c:2d:59:84:db:65:89:8f:94:8c:
99:99:68:64:aa:2e:a1:bd:42:44:46:41:33:7b:5f:e3:2f:49:
3a:51:7a:a2:48:4a:2a:0a:b4:26:0e:42:64:71:99:46:18:75:
37:9d:48:57:b1:b2:47:b9:1c:0e:fc:9c:60:d3:23:15:7c:49:
ca:b5:99:e0:c0:15:ad:0d:e2:bc:2f:a9:30:52:e3:70:7f:1a:
2e:48:bf:5f:db:cd:c2:63:ab:4e:87:aa:e9:e6:f1:48:63:8f:
8f:b6:6b:83:f7:98:3f:a0:a1:d5:b5:e0:cd:d3:0f:e6:a5:56:
44:18:cd:8e:04:8e:12:22:a9:52:3e:f1:e8:e9:b9:43:7f:9d:
7a:50:8b:5f:33:db:4d:67:6e:73:e3:51:cb:e9:d3:0e:9e:57:
00:4d:b8:23:6c:b4:9e:05:9d:dc:d8:ef:84:0f:3f:96:fb:94:
ce:ee:72:ed:ee:ab:89:a6:b4:c6:8f:d2:46:48:9e:77:dc:96:
d7:88:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:41 2024 by rpki-client on console-ams.rpki-client.org