Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
File: KTvwacT02DHu52nVsTnjAh2zSwA.cer (raw, json)
Hash identifier: o7DiCRRsuwnKpTqR22c+6X+ytpI1rlJoAVh0+1yWBvE=
Subject key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0201EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Jul 2024 05:05:59 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 203.8.2.0/24
IP: 2001:df4:1340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131566 (0x201ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 24 05:05:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:16:02:b5:f0:4d:18:ac:7e:24:00:45:2f:
40:8e:60:eb:5c:6c:de:40:4e:4e:26:d1:6d:79:27:
5a:c8:bc:70:9a:b8:f6:ca:35:83:3b:f5:1d:78:d8:
18:1b:14:7b:4e:95:71:1c:31:c2:7d:e5:2c:99:e4:
b9:c7:5e:9f:21:ac:45:de:f4:e9:44:7d:1e:75:39:
5f:b4:60:34:90:c5:98:95:f5:d5:5a:1f:04:ea:a8:
d7:31:55:d8:48:fb:7b:e1:18:e2:e0:81:b7:8a:17:
be:c5:20:37:45:2a:3d:33:e6:90:d0:af:ca:68:6d:
e5:75:5e:11:34:8b:17:e6:17:49:a1:7b:b2:11:28:
35:5e:ba:f4:ec:c6:43:93:d2:2f:c3:22:c9:2e:94:
67:8e:74:0f:9b:a8:55:e4:ec:54:7c:ac:8a:4b:27:
c9:e5:bc:7d:4b:39:2d:2b:ce:5e:08:f3:3f:35:e7:
34:49:69:3a:e4:1e:a9:b1:be:50:e9:67:2f:b5:f3:
17:11:a9:6d:c7:a9:f1:64:98:3d:9f:1a:f0:39:08:
ae:e8:f2:9b:19:01:db:2c:09:87:11:96:30:2a:72:
c2:40:ff:3d:03:af:3f:7d:1e:68:0d:04:7c:53:7e:
37:81:56:13:ba:bc:28:85:e1:a4:45:85:12:49:56:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.8.2.0/24
IPv6:
2001:df4:1340::/48
Signature Algorithm: sha256WithRSAEncryption
5a:6d:0c:7b:c6:9e:7f:98:ab:8d:b1:2c:1c:56:5c:31:cd:34:
69:8c:55:18:bf:3b:78:2a:af:6a:ef:78:25:52:57:1a:ae:52:
50:3f:cd:be:ae:d3:1e:b5:2c:e0:da:e4:e1:b6:a1:1d:4b:d7:
e7:95:08:fe:3a:f1:43:5f:d4:3d:67:b8:55:9e:31:3c:89:58:
48:87:64:05:3b:7a:39:79:05:8b:ec:95:31:17:92:9a:0e:00:
8a:78:e3:96:15:53:ca:cb:cd:20:f5:28:43:a8:3b:3d:40:5e:
7f:6c:38:32:72:70:0c:78:bd:ed:1b:32:9f:4e:94:c0:2d:12:
c8:6d:09:41:57:23:46:71:67:b0:f9:21:a7:af:7e:e6:35:66:
a1:13:82:c3:05:3b:7b:f8:f4:4f:43:ff:8a:3f:ad:88:5c:ac:
d3:26:90:a3:49:ca:29:a1:89:80:df:80:cd:49:4e:10:1b:5b:
42:5f:71:19:34:08:69:3d:e3:b4:5e:cc:c2:7a:70:c2:ff:ab:
a4:d6:74:9b:13:08:17:1d:17:17:e8:a1:4f:45:2f:3e:bb:a6:
72:bf:b1:d6:76:7c:a5:d4:4e:19:2f:79:b3:a5:35:11:52:1f:
af:8a:9b:7c:3d:a3:e5:5f:8b:4d:5e:8c:cd:17:dd:cc:26:6e:
8b:95:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:34 2024 by rpki-client on console-fra.rpki-client.org