Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
File: HQSsXQPY72rEMd4aeq57aHaBtjY.cer (raw, json)
Hash identifier: lKsdxz6HI5BZu5DRaxN3ujtkbLGNsacdwMSSJMSJvRE=
Subject key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B8FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Aug 2023 13:30:07 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 17888
IP: 202.83.192.0/19
IP: 2400:f000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112891 (0x1b8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 27 13:30:07 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:33:5d:a3:58:be:13:3a:45:94:74:58:83:
9f:97:99:51:f6:a0:54:4d:f3:05:80:69:fa:ab:15:
65:65:c9:e2:2b:46:b7:54:09:19:df:c9:72:5e:ed:
e8:5c:5c:82:ee:a8:a9:3a:b8:0c:70:aa:aa:ba:78:
4d:47:c6:ec:f4:79:a3:8d:60:8a:4d:b1:11:5f:d5:
6b:1b:32:7d:47:5b:d0:03:8c:55:67:ad:43:ce:a0:
07:56:a5:a6:d5:86:2d:fe:34:23:a1:97:cc:a6:e6:
aa:37:fb:c3:ed:e1:3c:bd:25:e9:ae:b9:f0:f2:e1:
8a:5f:91:23:1c:15:dd:03:32:c5:98:25:ec:02:5b:
2d:e9:59:7b:92:79:83:8e:b7:41:eb:f4:ac:dc:86:
f3:7d:c3:80:85:a7:9a:1d:39:b8:d1:c6:f9:d6:ff:
cf:99:52:63:d7:25:b8:64:5e:99:69:56:9a:d4:36:
5c:ef:62:82:cd:2b:dc:cd:61:d2:71:cb:77:a2:51:
4c:b1:aa:df:b1:37:ad:b1:12:e4:bb:61:20:a7:92:
3b:3e:77:cc:d2:8d:4b:69:56:e2:08:a5:c7:ff:e7:
c8:fa:60:44:b9:ff:df:95:38:52:7e:c4:1b:8d:b1:
68:e1:de:26:38:a6:65:87:77:f2:bd:ce:2a:1f:a4:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17888
sbgp-ipAddrBlock: critical
IPv4:
202.83.192.0/19
IPv6:
2400:f000::/32
Signature Algorithm: sha256WithRSAEncryption
25:5e:ac:69:2d:3f:bb:b3:e3:76:7d:15:a7:cc:d3:3d:52:ab:
7d:79:9c:8e:29:7a:17:88:b6:37:c9:79:09:38:9c:ae:22:b7:
67:54:a1:f2:f8:18:24:b6:81:07:c3:10:54:05:75:cd:44:c3:
24:ba:ec:c5:8b:f6:3e:ac:e8:f5:09:e9:9f:68:fd:42:da:21:
98:42:38:4d:3a:3f:11:5a:81:f5:75:f4:96:a0:b7:ac:44:16:
d7:f4:98:ad:e2:bf:33:0c:d2:51:4a:fa:fc:86:37:a3:60:d4:
1e:a1:83:21:89:48:05:86:a1:c4:c9:18:31:a5:38:55:3f:08:
c3:9e:0b:40:07:f1:b2:2e:4f:f5:c1:17:b1:a5:05:06:2e:f9:
e2:09:be:aa:05:f5:51:79:49:c6:60:97:f5:fa:2f:46:02:d9:
93:e3:14:1a:67:3f:24:ff:7a:5c:6f:cf:63:b5:f4:f9:b1:e2:
d7:f7:0d:b6:00:c7:5c:b5:50:c9:06:a9:f3:f7:cd:48:22:cf:
c7:b9:db:dc:96:91:59:dc:66:35:ac:52:e7:0c:68:6d:e1:f4:
45:be:73:ec:f0:6f:34:a4:33:40:a3:8c:60:25:ea:d3:23:ce:
17:d5:63:a8:75:db:9e:40:e6:2a:c2:43:a1:15:08:c0:c5:5f:
d9:e0:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:53 2024 by rpki-client on console-fra.rpki-client.org