Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
File: EdV6dX7VZXXQSeQpyOxzelYFC3k.cer (raw, json)
Hash identifier: a77WgNLaYqFnHg7oMbK/EnjIarjnbyK/vqLzq976ESk=
Subject key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E365
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Mar 2024 16:01:10 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 56123
IP: 115.124.8.0/21
IP: 2407:a200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 05:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123749 (0x1e365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 7 16:01:10 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:b9:a2:e3:4c:1e:a1:33:94:8a:3a:42:07:
4b:f2:24:24:ed:c8:bf:d8:38:b1:c5:83:00:8b:fc:
f2:c5:26:18:32:a2:c8:29:81:d6:25:49:4a:b2:ed:
cf:a9:f6:7c:f3:9b:71:3c:7e:e0:97:d7:3c:57:2b:
9d:05:34:02:db:d7:be:8a:57:63:2f:0f:03:f5:19:
9d:76:06:40:80:f5:64:7d:52:42:41:eb:0f:6b:16:
a2:7f:27:7f:a8:ba:e6:7b:19:36:dc:44:70:91:93:
ee:61:93:10:a9:fa:ac:cc:57:6c:a9:d5:40:0f:be:
10:93:bb:da:96:6d:45:32:90:61:46:9e:4c:3b:79:
c6:ca:55:22:e6:37:b3:8d:8d:4c:03:1e:45:cb:56:
9b:f6:dd:cb:ec:e4:f3:9f:93:1d:d0:5f:87:1a:86:
7f:ef:28:da:e4:07:93:0d:9a:e9:39:0e:7b:17:3c:
71:6f:6b:02:6b:9b:6c:7c:df:03:68:fc:cb:be:8f:
19:2b:f2:a1:01:07:4b:73:d8:0a:8e:d7:89:6c:bf:
fc:54:bc:4b:0a:0b:c2:ff:4a:66:fd:31:7c:5a:d4:
8a:e2:0a:c5:0f:7f:64:e1:c9:03:ab:d2:1e:78:4c:
65:08:23:4c:a2:28:30:cc:55:99:71:1b:79:07:3e:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56123
sbgp-ipAddrBlock: critical
IPv4:
115.124.8.0/21
IPv6:
2407:a200::/32
Signature Algorithm: sha256WithRSAEncryption
76:b7:3c:ca:a0:c7:fe:b5:e4:cc:79:b7:16:f4:36:25:74:53:
d0:49:e4:6c:94:e4:0f:f1:10:6a:d7:a7:f9:f4:19:44:60:c0:
ed:0d:6c:38:16:45:4d:ba:15:a6:91:29:cb:9e:75:1a:c8:bd:
62:58:34:13:77:58:51:3f:0e:67:a9:8d:15:be:b2:33:78:fc:
32:7d:30:57:df:9e:d0:73:51:92:9b:b7:dd:f8:79:8e:50:e8:
02:ca:27:49:fd:12:45:23:e0:3e:e0:94:fb:04:72:04:f3:69:
67:64:11:d5:b3:82:1f:20:46:1f:2e:25:5b:c6:88:15:07:9a:
e9:98:60:6b:77:51:3a:b7:ac:4a:80:31:8a:b7:73:75:0b:aa:
82:77:ad:55:98:21:b4:7f:10:66:93:63:93:32:45:74:90:7b:
c0:ab:a3:41:9c:1c:c5:bc:1c:27:aa:ea:fe:72:f4:06:98:c0:
a2:e2:50:ed:ff:54:d2:e9:c6:f1:9c:69:79:54:a7:54:80:7f:
ed:f0:2b:26:6a:3e:ad:58:cd:79:1e:da:a9:36:21:5b:f4:f9:
f2:e7:77:96:cd:f7:65:e3:9e:90:ad:45:6d:66:20:3e:1b:3a:
84:7e:ae:6f:fa:3e:3a:f9:ba:2e:de:98:e3:d9:07:9f:76:07:
5c:8b:a5:0f
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAeNlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwNzE2MDExMFoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQy
OUM4RUM3MzdBNTYwNTBCNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZ87mi40weoTOUijpCB0vyJCTtyL/YOLHFgwCL/PLFJhgyosgpgdYlSUqy7c+p
9nzzm3E8fuCX1zxXK50FNALb176KV2MvDwP1GZ12BkCA9WR9UkJB6w9rFqJ/J3+o
uuZ7GTbcRHCRk+5hkxCp+qzMV2yp1UAPvhCTu9qWbUUykGFGnkw7ecbKVSLmN7ON
jUwDHkXLVpv23cvs5POfkx3QX4cahn/vKNrkB5MNmuk5DnsXPHFvawJrm2x83wNo
/Mu+jxkr8qEBB0tz2AqO14lsv/xUvEsKC8L/Smb9MXxa1IriCsUPf2ThyQOr0h54
TGUII0yiKDDMVZlxG3kHPlcdAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUEdV6dX7V
ZXXQSeQpyOxzelYFC3kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY3MkYyL0REOEVDMUM4ODBENDExRTlBOUM5Qzc1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3
VlpYWFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANs7MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDc3wIMA0EAgAC
MAcDBQAkB6IAMA0GCSqGSIb3DQEBCwUAA4IBAQB2tzzKoMf+teTMebcW9DYldFPQ
SeRslOQP8RBq16f59BlEYMDtDWw4FkVNuhWmkSnLnnUayL1iWDQTd1hRPw5nqY0V
vrIzePwyfTBX357Qc1GSm7fd+HmOUOgCyidJ/RJFI+A+4JT7BHIE82lnZBHVs4If
IEYfLiVbxogVB5rpmGBrd1E6t6xKgDGKt3N1C6qCd61VmCG0fxBmk2OTMkV0kHvA
q6NBnBzFvBwnqur+cvQGmMCi4lDt/1TS6cbxnGl5VKdUgH/t8Csmaj6tWM15Htqp
NiFb9Pny53eWzfdl456QrUVtZiA+GzqEfq5v+j46+bou3pjj2Qefdgdci6UP
-----END CERTIFICATE-----
Generated at Thu Apr 18 06:34:59 2024 by rpki-client on console-ams.rpki-client.org