Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.cer (raw, json)
Hash identifier: NuciEIVGhglRYxZWLrIOLKB208HSE5wmhgPAOPt8ORM=
Subject key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020BD4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Sep 2024 14:05:50 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 55707
AS: 56129
IP: 103.1.108.0/22
IP: 103.23.104.0/22
IP: 163.47.252.0/22
IP: 203.31.114.0/23
IP: 223.25.112.0/21
IP: 2406:8a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134100 (0x20bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Sep 4 14:05:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9138447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:d5:e6:6d:f5:3b:df:6d:09:c1:79:a3:0a:
77:50:f0:2d:4c:c8:7c:cf:8f:51:a0:6f:92:72:c0:
bb:c1:7f:32:60:8a:3f:d5:1c:c7:56:d2:eb:52:cc:
24:6a:73:09:aa:b8:98:79:23:be:96:4e:41:7c:de:
71:d9:c3:00:39:b3:ac:af:ca:39:52:dd:12:18:6b:
a0:00:b8:af:a4:b2:e3:8d:73:23:20:11:ce:61:96:
09:fa:88:57:5b:7f:51:87:8e:a0:ba:d6:16:85:36:
a4:38:15:8b:ae:3b:41:75:76:9a:69:6b:05:c8:e5:
69:fe:2d:97:6c:6f:34:b4:b4:8d:bc:08:cd:06:67:
1f:5f:09:1d:40:ce:7e:0b:6f:4d:87:13:8c:0d:c4:
63:e0:3d:f0:21:a5:06:6d:87:0d:13:74:10:d9:23:
40:a8:66:34:3b:5d:74:4a:0c:f2:e7:ac:7c:0f:00:
83:e0:89:ec:1b:a7:57:d7:60:b7:cd:b8:c5:59:0a:
b0:a6:bc:8c:c8:db:d0:f3:87:c3:c4:19:09:1e:c6:
8f:b6:c0:0a:98:b7:0f:28:7a:f0:85:ef:7e:c7:51:
03:3d:bf:b1:04:7c:20:87:b0:7c:7e:14:24:b7:ee:
4b:f9:e2:65:d2:75:7a:3a:2a:84:2e:05:96:d7:c4:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55707
56129
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
IPv6:
2406:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
85:15:42:02:b2:27:96:89:0b:18:d2:43:1f:9a:cc:8e:08:b7:
c0:7d:b9:9a:ed:b7:30:0f:6d:66:d5:bc:e6:c4:35:90:b7:1f:
ac:21:dd:cb:ab:f5:ae:9c:37:b4:d2:2e:14:3d:2b:a3:b6:ae:
1a:32:49:71:f6:f4:4b:7d:3e:be:de:41:60:f9:13:10:0a:82:
7f:70:39:f7:30:dd:18:18:01:db:db:a2:fa:5e:da:6f:e5:c3:
15:99:0e:db:66:9a:97:7f:66:a3:40:6b:28:02:8a:38:a5:76:
bb:c4:ad:74:6e:bf:f2:cd:e4:92:89:f9:87:e9:c7:fc:bc:3e:
07:10:ec:18:2d:09:fc:b7:ff:44:6b:27:6d:d0:5e:ae:d1:23:
21:3b:6f:00:70:28:10:fc:e1:fc:06:6a:36:0b:da:41:d1:7e:
12:41:bd:74:71:37:ad:cd:28:f6:64:fa:a1:0c:5d:3a:6f:d7:
8c:7e:6a:d4:2c:04:51:06:e4:d9:dd:05:02:dd:fc:25:c9:1c:
b6:c1:8f:ec:46:db:c7:61:68:0c:bb:72:6f:a3:a9:97:a3:2f:
5b:f4:04:ae:1d:b3:e9:21:c3:16:18:8d:5b:2f:b1:4d:0e:66:
65:25:b6:0f:c5:43:62:ea:fe:1e:32:b6:04:49:55:da:43:ba:
da:82:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:09 2025 by rpki-client