Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer (raw, json)
Hash identifier: dyDvG/sqfxmVyxdog21iuKSjhK1FOfn9FHlvpp8EWl4=
Subject key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02139A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Oct 2024 05:49:58 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.76.36.0/22
IP: 116.206.76.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136090 (0x2139a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 11 05:49:58 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:80:b0:78:f1:33:9f:b5:20:17:25:b1:a8:
8b:b0:9e:db:01:e3:50:e0:78:09:48:1a:e5:43:a7:
86:4b:99:e1:ff:90:47:e8:5b:12:1f:c4:ab:75:6c:
40:70:2e:df:3f:47:37:4c:cc:a0:bc:c3:c2:fa:7c:
7f:5d:0f:cb:a9:9f:26:da:a1:fd:0b:b9:71:0e:9a:
1f:53:2b:51:9a:ee:d7:58:3f:a9:d7:31:90:1a:36:
02:bd:29:89:ba:cf:ea:ec:b0:cf:47:34:17:d1:6c:
f1:53:79:be:f1:83:90:8f:a6:42:15:77:7e:82:58:
b7:16:e1:06:a5:c4:35:a3:d2:29:9a:9c:97:bc:8c:
ea:11:de:4e:9c:c0:50:ad:82:cc:10:a2:cc:f2:0b:
95:b4:00:90:24:ba:a9:17:2b:c3:4d:c7:99:c9:93:
01:fc:1d:da:c2:5a:77:88:d4:f7:8b:d1:9c:cf:0d:
36:1d:6f:b3:a7:0b:f2:30:7f:ac:ac:14:b2:a4:a3:
d7:1f:33:eb:8e:91:5a:af:37:00:9f:b4:a1:e9:d8:
a7:10:e7:51:30:cf:d5:39:0e:d7:50:d4:06:c7:61:
c2:7c:2d:f2:19:51:48:02:17:e1:00:6e:c7:22:50:
4e:96:c5:d8:c3:42:ba:6e:17:29:f5:d7:8d:23:9f:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.36.0/22
116.206.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:c3:df:9f:bd:3c:89:44:89:81:5d:27:bd:52:18:98:7b:a3:
aa:bf:3e:47:be:1c:b7:e4:9f:36:bf:69:d8:9c:4a:62:ed:bd:
70:f1:72:c7:0d:71:ba:ed:4d:dd:00:8f:22:a5:f4:ff:9f:b5:
29:7f:5c:c7:86:47:cb:e7:70:01:5b:79:77:72:53:3f:f5:18:
f0:0a:a5:16:14:7b:f8:25:b2:e1:5f:72:07:a0:9e:04:00:82:
9e:9f:aa:7a:9b:59:5d:2d:41:73:78:9c:76:a5:36:1d:09:61:
7c:2f:51:51:e5:7c:ff:61:2c:f2:5a:b1:5c:cb:59:95:e5:26:
a3:d1:ae:f2:c7:f7:2a:73:46:3a:ed:0a:a5:08:85:5c:bf:3a:
cc:1c:75:b6:a3:38:df:dc:4f:99:0d:dd:59:15:01:6a:f6:46:
85:db:14:62:a5:45:29:26:d3:ed:00:44:e0:36:0a:ec:92:fa:
c9:fb:97:4d:a6:1e:2a:56:f7:bf:91:55:64:22:3f:20:a0:2a:
04:96:7e:42:c0:b7:69:eb:63:c2:56:2a:e1:96:d6:2d:4d:bf:
09:95:c1:e7:b6:1a:cd:89:ba:0b:c6:73:5a:19:fe:49:09:f4:
be:97:dd:95:53:25:bb:6b:b3:7e:c5:00:d7:a1:0e:31:a0:ac:
3c:3c:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:30 2024 by rpki-client on console-ams.rpki-client.org