Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMswK1yuUoA5N0i--FumeosuQ-M.cer
File: DMswK1yuUoA5N0i--FumeosuQ-M.cer (raw, json)
Hash identifier: J7A3YHkhgKKaDM15AaO0iRqZh9xFOMN5qyGgnDgOOL8=
Subject key identifier: 0C:CB:30:2B:5C:AE:52:80:39:37:48:BE:F8:5B:A6:7A:8B:2E:43:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DFE9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/DMswK1yuUoA5N0i--FumeosuQ-M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Feb 2024 19:24:06 +0000
Certificate not after: Wed 29 May 2024 00:00:00 +0000
Subordinate resources: AS: 135115
IP: 2400:f9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 12:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122857 (0x1dfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 20 19:24:06 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=A91BE7CC/serialNumber=0CCB302B5CAE5280393748BEF85BA67A8B2E43E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:80:6d:94:ea:b9:88:c5:b0:b7:46:46:58:
19:4c:37:5d:50:1a:a7:d2:86:15:32:9a:73:27:11:
05:e3:17:90:2f:cd:6d:92:da:2f:3e:6b:63:5a:c5:
39:c2:ac:4a:ac:1d:cd:03:1c:68:3d:85:7d:c6:c6:
6c:18:81:32:9d:55:07:85:69:d3:16:86:0d:ae:c3:
f7:b5:d8:d7:ee:19:8d:da:92:0b:cd:c4:f9:89:3d:
4f:64:22:9d:3e:3e:bd:d3:6f:2d:1d:fb:5c:9c:b3:
90:5d:c4:c4:b2:e6:60:82:04:07:6f:e9:ae:80:c8:
97:04:78:32:00:73:aa:14:e2:74:03:5c:53:7b:d9:
48:5a:8d:84:a4:d5:ab:23:11:8d:7f:05:b6:fc:2b:
c3:64:b0:80:15:7c:f8:24:07:8e:a8:de:57:1a:48:
46:bc:6c:f6:27:8a:c3:5b:a7:1f:2a:16:03:cb:79:
d9:6c:39:5a:03:04:a8:91:3a:c6:60:21:68:68:e5:
85:50:8b:22:35:ef:4e:34:b8:d4:24:4b:13:06:d6:
f4:fe:3f:27:91:85:16:1f:9d:07:48:53:26:e3:b9:
e3:27:10:7b:be:51:d6:fa:47:20:d0:1b:c7:e5:de:
01:ab:bb:4d:4b:3e:d7:14:b0:0b:0d:a3:47:29:1a:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:30:2B:5C:AE:52:80:39:37:48:BE:F8:5B:A6:7A:8B:2E:43:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE7CC/0CB606440A8E11EA8DB74658C4F9AE02/DMswK1yuUoA5N0i--FumeosuQ-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135115
sbgp-ipAddrBlock: critical
IPv6:
2400:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
53:95:4d:cd:60:9d:b1:0e:27:fd:5d:71:41:17:65:58:d9:9f:
83:69:6a:f3:2f:3f:77:4d:4d:00:f7:e0:79:93:1a:4f:ae:69:
29:08:5e:c0:3a:c2:01:e0:4e:30:0a:1b:b9:2e:c6:d0:07:95:
33:f0:9a:ba:a6:69:00:24:19:7a:44:9b:03:19:3d:26:f7:b0:
b7:42:f5:ea:95:30:04:e2:a2:ee:4a:fe:69:c7:40:85:36:62:
52:14:21:b0:c4:f4:09:ea:98:f1:19:9b:cd:84:e0:73:91:93:
d1:c9:ab:fe:7f:01:d5:a3:84:16:8f:b9:ae:a7:32:d3:1d:e9:
e2:4d:1b:ac:34:c3:59:47:c4:0a:43:2d:df:24:40:52:20:86:
6f:66:cc:d4:eb:c0:cb:28:e3:3d:e0:a8:59:53:44:b6:d1:33:
6f:9f:2e:6b:93:e7:5a:39:25:ab:bf:bb:f3:86:94:57:95:51:
b5:48:8a:2c:37:02:8c:02:53:25:74:8e:44:7d:95:af:69:18:
ce:39:31:99:dc:ae:76:e2:07:ef:c5:c8:4f:4e:d8:0c:1c:f2:
52:f2:30:cf:0e:e6:59:c4:c1:7a:e8:f5:0b:9f:82:e9:09:34:
0b:72:06:61:42:62:06:fa:41:c4:15:81:ec:a5:8d:cb:de:c8:
15:63:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:24:09 2024 by rpki-client on console-ams.rpki-client.org