Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
File: FggPXxr0qlYST_cZXRPoW5OllSE.cer (raw, json)
Hash identifier: nyJzyQFzsxdIBDsDvEhs4f1uRlDw0O8Mdlx7vlN9OM0=
Subject key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBEF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Apr 2024 05:19:02 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 142422
IP: 203.16.0.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125935 (0x1ebef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 05:19:02 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:08:90:a3:dc:c7:ae:29:30:fe:88:99:1f:
b1:ea:69:ee:0b:6c:fc:ae:8c:5d:c1:74:95:0a:3f:
61:1d:d1:29:2f:89:93:f6:41:a9:75:4d:46:28:7c:
f0:1e:81:6f:39:d7:92:38:39:51:b9:f5:4f:21:71:
9b:c1:29:9c:6f:f8:21:40:d4:38:ce:14:56:2e:cb:
11:0b:1b:16:17:5f:29:3a:8d:6e:8b:ae:b1:1c:1c:
e1:5f:2e:72:27:23:43:7c:96:fa:42:d0:a0:40:c1:
e2:72:ba:e0:b5:2d:ff:9d:4a:d7:d0:37:da:6d:35:
9a:51:91:b4:4f:8d:02:3e:07:39:92:eb:19:34:99:
c7:38:8e:3f:e4:52:5b:0d:80:0f:cc:03:88:23:1f:
2d:25:69:5f:18:5a:4a:e1:3a:3c:17:01:c1:61:09:
d1:d2:72:4d:f3:1e:31:39:fb:7a:22:14:29:39:7d:
0e:21:21:c3:44:0d:b9:9d:f9:b0:23:98:52:17:99:
66:d5:30:a7:94:70:51:7a:78:b4:cd:60:b5:67:5c:
3e:db:21:f6:e1:e0:39:38:ba:a8:a8:18:e8:94:b8:
c5:90:7c:a9:ab:fa:ca:aa:8a:a5:50:dd:72:e5:f4:
4f:e7:16:a3:5d:71:91:d2:6b:47:2f:29:d1:3b:8d:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142422
sbgp-ipAddrBlock: critical
IPv4:
203.16.0.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:e0:0c:0e:9b:8f:0b:59:43:9c:48:c8:32:9f:14:5c:b6:4a:
ae:33:a0:6e:93:38:6e:24:fe:5f:fd:07:1c:05:b7:ed:48:b6:
ae:94:21:6d:72:69:1d:ec:a6:87:8c:46:6f:a2:80:1e:b9:b4:
40:32:15:b4:1f:59:85:db:82:c9:38:b6:8e:2e:2c:6e:52:2f:
1c:b7:ed:c0:55:89:0d:01:27:28:0f:75:47:85:3a:70:27:41:
5a:1c:66:05:44:f6:fd:16:bc:fa:88:8f:6e:09:8e:8b:56:c6:
78:62:9c:2f:9e:fa:0b:d4:4a:fa:81:a9:13:7f:2c:d5:dd:50:
54:8a:7a:cf:62:a1:94:ec:0b:f3:bb:c5:5c:08:bf:5f:f1:34:
86:c1:a6:3f:d3:f4:78:b4:d2:6c:89:96:43:6b:49:90:2f:e4:
e2:dc:2b:9c:f2:f8:5d:7d:42:d8:d3:13:e1:7a:14:94:f7:30:
57:8b:e6:e3:eb:d1:92:f6:ab:21:98:9e:04:d7:a0:e8:94:b5:
d4:87:95:7e:32:a7:09:17:e4:4e:eb:cf:4b:a1:19:bb:89:5b:
c1:2c:bc:92:51:88:0a:03:96:44:6f:6b:50:8f:3c:f9:51:1c:
cb:b2:29:01:1b:c9:6b:4d:f0:3c:a9:21:56:de:41:a4:fa:3a:
8b:60:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:19 2024 by rpki-client on console-fra.rpki-client.org