Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer (raw, json)
Hash identifier: GDuGn3LX54hHtBNnvi3VZwH+GVjwU2gPOonDS3pJk10=
Subject key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0218A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 14:55:42 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 38795
AS: 45768
AS: 45953
AS: 46069
AS: 59206
IP: 27.111.64.0/21
IP: 113.29.208.0/21
IP: 180.95.0.0/17
IP: 202.134.51.0/24
IP: 203.34.155.0/24
IP: 2402:1700::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137381 (0x218a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 14:55:42 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:55:b9:b3:da:fd:09:84:13:c8:2d:4a:56:
5d:f1:87:c9:ec:e0:41:44:73:94:58:9f:81:5c:f2:
c2:f7:42:5a:04:f4:84:4b:6a:a7:f8:07:e7:3d:99:
35:c8:7f:7c:f8:82:5d:9c:60:f6:0c:98:c1:68:e7:
80:bd:29:4e:bf:98:92:64:be:ae:14:a7:fa:a2:aa:
94:b2:a6:9a:50:ee:ff:48:74:f4:f8:19:eb:80:c0:
e6:ed:4b:a0:68:6d:6b:0b:e7:fd:26:41:44:4b:a2:
27:f9:8c:a8:0e:a2:2a:c1:50:03:11:12:78:00:71:
a2:98:cf:81:18:5e:f5:a1:21:0a:8f:d7:47:14:df:
59:1c:d3:c7:54:cf:b0:f1:1d:d6:f6:17:80:91:41:
c7:ec:14:71:69:22:10:52:77:9e:2a:20:d9:d6:15:
f4:25:93:7f:4f:66:10:50:3e:f1:a1:2c:0b:f5:5f:
e8:85:ad:3f:e9:99:00:67:4e:9c:41:1c:33:79:fd:
e6:8b:3e:d0:49:fd:65:c3:50:6c:6c:72:fb:3e:0e:
39:08:f0:e4:1c:4b:cb:a2:09:f8:29:e1:97:72:27:
24:31:44:5b:ec:1e:6e:e9:49:f8:a1:16:27:b0:19:
a7:3d:a3:98:ab:34:68:87:a4:07:fb:8d:82:40:44:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38795
45768
45953
46069
59206
sbgp-ipAddrBlock: critical
IPv4:
27.111.64.0/21
113.29.208.0/21
180.95.0.0/17
202.134.51.0/24
203.34.155.0/24
IPv6:
2402:1700::/32
Signature Algorithm: sha256WithRSAEncryption
b0:fe:d6:69:54:c2:7d:ec:9e:35:7a:2c:dd:aa:5e:fa:f1:c5:
d2:95:7e:57:c6:0b:42:79:08:e6:93:20:ed:b3:f5:e7:54:df:
fe:d8:da:cd:0f:1c:92:fb:56:cf:12:f2:54:4b:eb:c0:59:15:
f3:fc:c6:83:27:01:40:23:f8:38:af:cd:35:5b:1a:9e:9c:62:
04:3b:79:69:c3:d7:42:ac:86:80:54:d9:01:33:c9:9b:a9:5e:
67:14:71:4c:ea:0c:7c:47:29:c4:ae:62:65:e8:0f:3c:cb:bc:
b3:92:bb:6d:b2:fa:c7:f0:a9:68:1d:d4:5a:de:66:ce:1b:4d:
17:bb:bf:ba:46:b8:6d:ec:19:06:89:3d:89:63:9f:ba:01:ff:
af:95:40:22:ce:5c:02:01:24:71:2f:b6:9a:7b:a5:f4:f7:8f:
90:60:5a:a3:3b:3e:73:1b:2c:ad:55:d5:06:1a:9b:77:53:fb:
a6:27:4a:38:e6:4a:ff:84:83:88:7b:8d:6b:87:91:98:e8:a8:
d0:11:aa:a5:6c:b3:ac:a8:dd:7c:42:2d:12:43:a5:97:13:44:
d5:ef:c3:28:c4:7f:09:78:72:1f:f4:d9:8e:9f:9b:6c:1a:69:
1f:39:bf:60:f3:60:32:76:96:4a:d9:00:42:b1:8b:5a:ba:02:
2e:da:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:38 2024 by rpki-client on console-ams.rpki-client.org