Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.cer (raw, json)
Hash identifier: MOk0ARWiLn1DRpt4apiNGgcx9/749ODDCJnBZcUoHls=
Subject key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EAD7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Apr 2024 23:59:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 45148
IP: 119.252.192.0/19
IP: 2403:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125655 (0x1ead7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 23:59:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:a8:5e:7f:97:3d:a6:ea:5e:72:c4:52:b3:
9c:ad:d0:99:1a:4c:24:77:96:c4:68:bb:2c:52:0c:
0c:b7:1a:77:2c:d4:7d:9e:06:c3:f5:a9:0a:b3:d1:
13:29:28:9f:de:36:9a:bd:0f:f1:70:37:d7:5f:2a:
76:08:ce:fc:67:2d:c6:2e:3d:93:94:0e:90:3f:77:
27:38:c1:d4:2b:58:6d:69:b3:2b:ba:21:eb:59:99:
d2:fa:41:ee:3d:95:70:7f:da:40:d1:5f:f1:37:c3:
bf:21:ee:29:e2:03:86:01:58:68:9a:e2:c6:3f:73:
a9:89:3c:94:4b:91:b7:2f:7d:41:b4:30:fb:56:16:
ba:f9:26:75:17:e1:90:bd:48:f7:54:ce:3c:52:e4:
83:0e:c0:4f:d4:87:35:b1:f5:52:29:9d:59:d0:0f:
3c:83:77:d4:c8:56:74:bf:93:df:a9:47:42:55:32:
a6:37:ab:8d:fd:83:9b:98:08:b2:ce:ce:63:97:1c:
79:29:3c:dc:dd:61:fd:57:85:fd:16:36:db:cb:20:
23:fd:bd:98:63:7e:4d:35:d5:a4:fa:1d:3a:41:bc:
c3:d5:cb:5d:91:67:ce:56:60:0f:b8:f4:b9:30:24:
84:3b:98:08:4b:e8:aa:c7:bf:ae:71:a5:f9:70:ee:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45148
sbgp-ipAddrBlock: critical
IPv4:
119.252.192.0/19
IPv6:
2403:2200::/32
Signature Algorithm: sha256WithRSAEncryption
a8:a5:8b:e5:03:0f:59:9a:6d:e1:13:57:a5:62:b7:f2:1e:20:
86:ad:bd:a5:38:40:68:62:00:80:3a:79:3f:1f:32:3b:77:6f:
53:60:40:5b:eb:79:60:ac:1b:09:4b:89:41:0c:d2:8e:56:82:
86:b7:c8:01:cd:32:fc:62:cb:9c:ab:fb:01:2d:d2:e3:80:68:
1d:1c:f8:db:5d:e0:2d:b9:3d:38:20:61:59:08:42:e4:fb:87:
66:51:eb:3a:c0:dc:0f:6f:00:da:b9:45:22:04:d8:b8:fa:e8:
35:83:48:85:b0:b1:28:5c:3a:a5:ae:a5:ee:7f:ab:ee:16:29:
c2:fe:14:90:29:24:4a:01:2e:7d:5c:d7:25:5a:69:5c:72:37:
a9:66:0e:31:dd:d6:7b:7a:4b:98:36:b3:0c:99:76:b5:0a:50:
66:b4:a8:14:84:25:ba:a6:15:7c:29:0d:be:44:2e:bf:44:4a:
ed:eb:74:01:2b:23:57:30:a5:4a:6e:d4:02:1c:2a:97:58:0a:
1b:d0:0c:48:eb:00:8a:a6:89:6a:10:44:71:62:b0:15:d0:06:
ca:e2:33:c7:b6:ba:75:cc:81:33:60:f9:f6:26:e1:83:28:56:
5b:91:af:40:8a:27:04:d3:c9:2b:c2:3b:fc:08:a4:0f:85:b5:
65:13:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:18:29 2024 by rpki-client on console-ams.rpki-client.org