Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
File: C99de_bArcNvIwEoNtjC3CQnkzw.cer (raw, json)
Hash identifier: aWcG9B8xnnIdbJ0ki2eUrZ2R6VCYSKA6RHT3aN5gaoU=
Subject key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C997
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 20:18:29 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 43.251.8.0/22
IP: 103.42.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 13:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117143 (0x1c997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 7 20:18:29 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f4:56:47:62:23:13:d2:76:81:c0:6a:65:
5f:d2:66:84:c7:0f:b5:85:09:70:dd:c4:02:8e:99:
7e:f1:11:d1:8f:d6:7e:df:6e:36:06:55:a2:a7:0d:
1c:b3:21:9d:b2:5f:c6:9f:ca:a3:c2:b1:0f:16:f7:
04:09:87:2e:f4:39:eb:00:7d:03:3c:01:e8:52:4b:
1e:0b:5e:9c:38:61:89:57:34:dc:80:b2:1f:bb:f2:
94:fa:f3:9f:91:98:49:58:0f:cd:29:0d:0a:7e:88:
99:46:49:b0:76:4a:99:18:86:d5:1a:fe:68:da:59:
22:2b:84:12:f9:ea:fb:96:03:59:85:50:18:da:b2:
7a:5c:e7:bf:a0:03:74:e0:9a:83:00:b0:5a:38:88:
b8:d5:e8:98:83:1e:64:85:8e:8d:8b:3e:3c:29:82:
4e:1d:4b:76:a1:0a:1e:39:c4:6a:45:fc:b1:b2:1d:
54:4f:28:c3:7e:db:cb:6e:1c:f4:44:f9:78:48:69:
87:f4:ca:4e:ec:08:fd:23:0c:de:1b:2a:5d:b8:79:
96:9b:7a:6a:82:7e:f5:3b:c0:f9:5d:a4:aa:67:33:
8b:9a:db:13:a6:9f:ed:55:8e:7f:0b:4f:2a:b7:4f:
9f:c9:b3:1f:8e:82:bd:ba:21:05:7f:06:8a:6c:36:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.8.0/22
103.42.104.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:17:2b:1f:10:fc:96:83:ec:20:81:66:8a:2c:a2:e5:b0:ea:
e2:49:14:1b:88:c3:47:04:3b:47:8c:60:2e:ca:1e:0d:4e:a4:
29:59:27:bd:3c:9f:23:dc:7d:de:d1:93:61:43:6c:bd:de:b6:
ef:43:ab:23:b4:0c:4f:b6:d8:ba:ab:c2:4b:9e:8f:6f:63:88:
80:b2:dd:f4:76:3e:f0:96:f4:f8:be:6a:9b:fc:48:94:d3:5d:
80:58:68:bc:e3:f8:1c:7f:9c:e0:e3:d7:10:87:f1:ab:3d:c3:
f7:62:04:30:12:8f:10:49:38:45:b8:74:a4:40:d6:5c:a3:fe:
12:3c:50:88:9b:e8:1c:bf:46:05:76:ea:6a:39:75:44:51:16:
57:9e:d2:b0:56:4b:75:1f:8f:17:09:8b:bd:4d:1b:3f:b6:2b:
43:bc:11:4c:7d:af:31:14:60:ef:01:13:97:f6:7c:2d:83:aa:
64:b4:ef:93:39:ec:ce:f8:70:e5:64:ae:46:03:6d:eb:bf:bf:
8c:6d:1e:c3:4c:12:c6:98:89:0c:f9:6b:5a:0c:15:6e:9a:74:
dc:1b:a4:42:1e:26:64:4e:cb:87:95:b3:95:ba:54:00:a9:54:
1e:0f:51:0b:90:8d:ee:31:0e:53:ea:50:1c:30:00:be:f4:d1:
40:24:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 13:43:00 2024 by rpki-client on console-fra.rpki-client.org