Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer (raw, json)
Hash identifier: i6DMzl7tQPdJl1Op0g4+PbALmCZ0rhTGvzaxnyrSkgY=
Subject key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D1D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Nov 2024 18:21:38 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 103.157.147.0/24
IP: 103.190.70.0/24
IP: 2001:df5:2480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138525 (0x21d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 22 18:21:38 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:1e:09:b8:3d:fd:cd:53:6b:ef:32:68:c3:
b2:d9:b7:86:e1:21:c9:1b:87:a1:e7:1d:5d:d7:94:
6d:0b:75:43:4a:08:5d:26:8f:2e:ff:df:88:09:c3:
e1:cb:c3:e4:fb:db:fe:80:da:ea:e9:ca:35:1d:4b:
60:aa:90:1e:50:2b:ef:86:7e:70:94:c9:ff:16:47:
3d:5f:73:89:55:50:03:82:82:00:b1:af:c9:d0:dc:
18:d7:f4:13:60:4f:77:7e:a2:c1:a8:6d:10:b7:f0:
5c:93:01:0c:84:2a:72:6e:12:99:ed:52:86:f0:68:
70:9e:f1:46:0f:cc:d5:db:fb:57:a5:ee:f3:ca:ad:
e4:b0:6b:59:56:d5:1a:c6:fa:e1:1c:a6:ed:98:d7:
1b:81:df:c3:ac:ce:06:41:d6:e7:09:cb:61:50:c4:
12:4a:4c:7b:89:27:cb:d4:fd:0e:d5:ca:7a:f1:83:
7b:f5:49:3e:7f:32:b7:43:f3:df:b2:e3:9c:41:8b:
43:52:3a:ea:7b:f3:8c:70:c8:7f:2c:2f:34:37:90:
c7:b6:07:32:bb:59:3a:27:d5:2d:8c:66:3f:69:6c:
44:f1:8a:89:96:83:80:98:06:a5:a5:63:fd:fc:10:
f3:69:36:56:e1:e9:8a:17:9c:c5:c0:80:5b:23:55:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.147.0/24
103.190.70.0/24
IPv6:
2001:df5:2480::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a4:b8:1e:2f:9e:ff:3f:20:9d:a3:49:01:10:ff:a9:d8:4e:
5e:40:3c:b2:ef:c5:43:08:3c:19:f4:b9:b4:67:fc:11:f7:a3:
46:45:67:db:2d:dc:95:5f:2d:03:6f:95:3e:43:c8:05:af:9a:
10:09:80:aa:52:aa:bb:37:e8:eb:e6:e7:7a:a2:fe:ea:85:5f:
7a:22:e3:62:45:84:fc:5e:da:75:c0:44:a3:28:71:99:6b:a7:
66:01:21:9b:5e:f8:38:66:a9:0d:dd:7d:19:85:07:8d:ec:8c:
27:28:f4:48:4c:0c:fc:1f:a5:0b:e5:80:ee:b1:47:3d:70:b9:
81:d2:19:06:8a:e4:03:85:88:63:22:46:12:46:3e:30:50:e3:
82:2c:d2:69:88:1a:9e:f3:9f:85:63:12:2a:5c:b2:81:32:8b:
ce:0f:6d:af:3d:9c:b6:98:60:55:42:fc:81:9b:c4:99:c6:33:
b4:9f:7d:ae:0f:8c:dc:9a:01:50:02:c0:c6:9d:05:6f:1f:74:
60:f3:87:c3:06:6d:8d:eb:91:ab:45:bf:e1:5e:b7:15:93:33:
a8:1f:84:46:86:6f:1d:64:fb:49:3f:a9:31:6a:20:c4:75:38:
6e:7d:1c:f3:b2:e3:db:25:28:de:12:e5:68:bb:cb:d6:b3:d1:
bd:47:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:30 2024 by rpki-client on console-fra.rpki-client.org