Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer
File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer (raw, json)
Hash identifier: DrBPkP2CeuK9v+Dp9krLGEGD7hUkyBLau4DUDdR1/zc=
Subject key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 10:14:13 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.76.36.0/22
IP: 116.206.76.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126832 (0x1ef70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 10:14:13 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:80:b0:78:f1:33:9f:b5:20:17:25:b1:a8:
8b:b0:9e:db:01:e3:50:e0:78:09:48:1a:e5:43:a7:
86:4b:99:e1:ff:90:47:e8:5b:12:1f:c4:ab:75:6c:
40:70:2e:df:3f:47:37:4c:cc:a0:bc:c3:c2:fa:7c:
7f:5d:0f:cb:a9:9f:26:da:a1:fd:0b:b9:71:0e:9a:
1f:53:2b:51:9a:ee:d7:58:3f:a9:d7:31:90:1a:36:
02:bd:29:89:ba:cf:ea:ec:b0:cf:47:34:17:d1:6c:
f1:53:79:be:f1:83:90:8f:a6:42:15:77:7e:82:58:
b7:16:e1:06:a5:c4:35:a3:d2:29:9a:9c:97:bc:8c:
ea:11:de:4e:9c:c0:50:ad:82:cc:10:a2:cc:f2:0b:
95:b4:00:90:24:ba:a9:17:2b:c3:4d:c7:99:c9:93:
01:fc:1d:da:c2:5a:77:88:d4:f7:8b:d1:9c:cf:0d:
36:1d:6f:b3:a7:0b:f2:30:7f:ac:ac:14:b2:a4:a3:
d7:1f:33:eb:8e:91:5a:af:37:00:9f:b4:a1:e9:d8:
a7:10:e7:51:30:cf:d5:39:0e:d7:50:d4:06:c7:61:
c2:7c:2d:f2:19:51:48:02:17:e1:00:6e:c7:22:50:
4e:96:c5:d8:c3:42:ba:6e:17:29:f5:d7:8d:23:9f:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.36.0/22
116.206.76.0/22
Signature Algorithm: sha256WithRSAEncryption
32:df:e3:ca:94:d9:1c:5e:c7:ce:d7:d7:27:c7:63:ec:90:45:
3a:95:72:bb:a1:73:7d:bd:54:04:96:99:19:96:3e:55:be:76:
33:87:9d:12:df:ed:7c:fc:b5:bf:48:3a:ed:7c:77:75:75:39:
a0:c5:18:0e:ca:e9:01:fa:76:4e:b5:1f:78:ba:bd:e9:cf:f8:
69:49:36:9b:e3:85:69:f5:e6:44:43:cd:f0:60:d1:36:ba:d5:
c3:d5:32:c2:2b:f8:27:a1:c5:66:fd:f2:22:83:a2:11:5b:20:
ea:08:ae:b1:c7:e8:ae:08:b8:a8:88:77:17:75:6d:99:3e:51:
5d:69:f8:51:92:83:44:93:0a:5d:61:aa:6d:31:2b:2b:b1:14:
7e:31:c5:cc:01:9c:eb:0e:92:99:20:54:ad:ba:f8:da:18:61:
51:a7:b1:d6:05:9d:d5:e3:78:c5:fc:1b:63:5b:dc:29:ea:fe:
b4:db:40:87:e9:74:be:c8:1b:a7:80:55:f0:80:51:33:1e:27:
eb:8b:27:9c:ad:fb:87:e7:f7:9f:6b:22:41:26:d4:9b:bf:2d:
f4:5d:0b:40:79:27:a8:14:cd:65:ba:33:b1:fa:16:46:c6:6a:
75:46:b0:6c:90:41:e0:e4:9f:8d:72:0f:95:1f:ff:2a:6d:c2:
4f:24:8b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:30 2024 by rpki-client on console-ams.rpki-client.org