Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
File: I-mD64u3-GulkjUkGhAWDIBSxk4.cer (raw, json)
Hash identifier: +efXTcr14o8wVu3eKO2DHlGC5GTZ8zLvHD2V4Z4HlOE=
Subject key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0216AA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 15:06:00 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 55490
AS: 132061
AS: 132618
IP: 27.55.0.0/16
IP: 49.237.0.0/16
IP: 180.214.192.0/19
IP: 223.24.0.0/16
IP: 2402:2700::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136874 (0x216aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 15:06:00 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:e1:a5:e5:9b:1e:ff:4a:e3:3c:4b:64:3f:
f2:40:f6:8e:de:d2:e2:9f:1a:f5:58:ef:37:77:d7:
7c:ac:0a:89:30:69:89:b7:3c:65:55:12:fc:4a:15:
a3:ad:de:8d:57:ba:7b:bd:43:d5:5a:9f:42:d2:7f:
05:de:0d:e3:ed:2e:43:f6:75:ef:3b:a4:bb:bc:40:
f9:a1:d2:48:24:0e:78:eb:44:dd:67:19:2f:4f:ad:
84:28:16:73:70:70:ae:83:e2:c6:0d:33:26:74:3c:
de:20:f2:a2:be:d6:dd:bd:83:75:f7:6c:ef:32:3b:
77:3b:c3:a1:27:fe:73:92:0e:c4:6d:a4:2f:81:be:
7e:2a:78:95:f0:b8:24:63:7c:c3:7c:07:55:9f:18:
eb:79:8f:4c:70:c3:62:d3:09:94:da:01:83:f8:63:
67:ba:23:96:00:2f:af:34:94:56:36:74:96:3c:69:
20:69:8d:c7:2b:68:8b:89:e5:f1:44:5d:b5:d7:2c:
1d:9e:fd:12:f8:4f:42:55:ee:44:92:fc:b7:b8:f7:
f3:6a:92:d6:0c:c6:52:21:80:52:56:80:98:87:62:
86:c4:30:76:b5:31:a5:a4:64:88:36:07:8a:4e:56:
4b:93:09:fd:59:fc:b6:71:f3:2a:6c:c6:b9:df:4c:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55490
132061
132618
sbgp-ipAddrBlock: critical
IPv4:
27.55.0.0/16
49.237.0.0/16
180.214.192.0/19
223.24.0.0/16
IPv6:
2402:2700::/32
Signature Algorithm: sha256WithRSAEncryption
03:3b:4f:b6:82:f5:da:52:65:ae:fa:31:ef:d4:5d:d8:47:dd:
41:91:ed:f3:f7:e7:4e:aa:58:00:42:47:0e:08:66:92:8a:62:
86:52:e8:8b:90:ba:4c:cb:fe:57:87:35:60:85:b2:21:0b:8d:
a5:7c:cb:2f:82:2f:3e:4c:0b:87:1c:3f:b6:59:f7:f1:04:da:
db:51:11:d1:51:b8:95:9a:07:12:55:6e:0e:04:d0:f3:5a:25:
9e:15:73:c4:02:38:7b:1d:29:99:90:4d:fa:05:a7:50:49:ae:
28:6e:85:ee:e8:5d:43:04:8d:b8:12:7a:46:5b:e0:26:6e:18:
6d:f0:c9:d9:1d:71:4c:1b:84:b0:e6:70:c0:8e:33:1e:e1:d3:
98:ff:36:90:b8:59:64:26:88:27:f4:e1:4c:b1:da:a5:15:14:
bb:3c:56:f2:e4:85:7d:c1:05:18:f5:88:36:52:4c:fa:66:d8:
4f:af:30:a9:32:4c:7f:f7:d2:7d:bf:f0:2d:4d:65:23:1b:a5:
42:fb:1f:64:4f:ac:d4:84:f0:b0:47:ca:a9:ac:3b:62:a2:23:
1f:65:07:b4:a4:d2:1d:9b:94:a2:18:c6:b6:e4:e6:54:18:b6:
de:9e:ce:6d:59:15:ea:9a:37:b5:1c:e3:a5:fe:c5:c4:d8:21:
8d:d7:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:22 2024 by rpki-client on console-fra.rpki-client.org