Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer
File: HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer (raw, json)
Hash identifier: kDSyZOxg6vJGOJq05Jl1BNuj0W00kfgOFuQ28QDwdL8=
Subject key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0216C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 18:27:00 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 153378
IP: 2001:df4:8340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136901 (0x216c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 18:27:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:bd:9c:78:03:87:bf:05:de:b6:8d:7f:ba:
07:8f:58:40:04:40:f9:93:6f:6c:af:41:0d:a2:6d:
98:4b:c7:a2:f4:ef:ee:60:7f:80:3e:29:b3:67:45:
ee:d2:91:45:e9:d9:7d:4f:d1:8f:be:ca:1b:25:ef:
5c:2b:0e:a3:49:b1:8c:8d:7d:5e:ce:c9:a5:f9:89:
2a:74:f8:b9:a2:d5:38:88:3f:c9:fa:6c:e2:3a:49:
c9:1a:f0:6c:ed:2e:d7:d7:88:c8:ce:4b:a4:7a:ca:
e8:30:ed:cd:a2:a0:36:16:f9:40:f7:f8:7d:06:d3:
34:d4:e8:cd:43:49:d2:9e:d2:d5:87:49:ff:64:ec:
eb:d4:c6:17:d3:29:2d:d3:53:2b:ca:9b:e7:b6:af:
8a:d1:e2:23:e9:b5:bb:97:f3:6b:75:e4:08:d8:4d:
83:c4:9d:12:a2:66:6b:40:1f:5f:85:c6:52:ce:a2:
5b:2c:3d:0c:a7:1a:5c:91:c5:6d:b2:eb:96:17:f8:
c8:32:db:14:d4:28:d7:f6:e2:de:d2:fb:0a:66:41:
91:61:df:23:32:10:d0:f4:89:7f:0e:d3:08:b9:ab:
75:0c:10:95:ae:75:d8:23:48:0b:af:be:3e:ce:47:
2f:16:94:05:99:e1:c8:4b:27:f1:66:27:76:f1:50:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153378
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8340::/48
Signature Algorithm: sha256WithRSAEncryption
7a:23:b0:58:ad:9d:80:6e:40:40:ce:06:db:96:20:da:cb:e0:
18:8c:ca:f4:ea:cc:2a:3c:6d:c7:b6:07:65:63:eb:f8:a9:3d:
3c:6e:6d:96:ca:11:74:07:70:3f:33:12:98:35:d5:9e:df:ff:
c7:b5:e7:90:13:66:bf:f1:2a:d3:62:ba:b2:b2:d8:2c:e8:89:
12:c7:32:d8:37:b6:79:93:3c:31:d9:0a:75:32:24:a3:eb:cb:
54:e3:5b:4a:84:83:0f:ad:3b:4c:72:91:54:6f:87:c9:86:82:
c2:1b:50:98:31:e6:b2:eb:e1:69:f8:58:93:35:82:18:07:82:
0d:a1:c3:0d:a8:a9:b8:4c:35:ad:52:b1:f2:68:f2:3b:df:f8:
49:5a:68:99:6f:3b:a4:68:d3:bf:47:db:0a:a1:80:60:89:47:
44:8a:7e:49:74:0e:17:c2:3f:fa:d1:f2:9e:26:f8:b2:a1:98:
6d:6f:9b:e1:f7:41:8b:e4:9d:e5:13:9d:2e:bd:75:1b:bc:16:
37:73:24:33:34:fb:15:14:96:3d:80:4b:84:af:8d:96:5a:2f:
43:c1:15:91:9b:87:94:17:db:f7:d1:e2:44:1e:68:f4:56:64:
bf:5d:06:41:77:f6:90:e1:a2:f7:0b:f9:4a:0e:f4:99:f4:36:
f6:15:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:14 2024 by rpki-client on console-ams.rpki-client.org