Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
File: KaAJAT90Md42nADKtUcWypNFJtM.cer (raw, json)
Hash identifier: aPHQx25gPazRKaAN2iaDwaYFw4m8roDdMWLoVmgx11g=
Subject key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02134A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 07:13:50 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 153341
IP: 2001:df4:4ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136010 (0x2134a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 07:13:50 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:14:9f:e6:bd:ea:ba:ec:bf:4e:6c:61:9f:
24:32:4e:1c:c9:ae:40:73:a8:c1:37:23:bd:1c:a7:
2e:d0:47:85:31:c3:e5:10:17:87:25:d5:92:9e:fb:
cf:73:a7:1c:5b:e8:e4:39:04:4f:7d:16:45:9e:d9:
9f:b5:76:15:17:3c:0b:dd:31:b0:59:64:61:5a:86:
33:a0:cd:dd:4b:c8:66:51:3a:8e:9b:f8:15:7c:78:
b8:a3:77:9d:3e:c3:61:9a:b5:61:74:70:be:bc:b8:
b6:68:cf:59:32:70:9c:ff:e2:ee:ef:5e:c3:71:78:
9e:60:4a:49:38:9f:16:dd:5d:ad:e0:c6:b1:67:5e:
84:98:d7:44:cb:8c:1b:52:53:52:a8:40:a6:91:9c:
75:0f:a8:03:a7:de:e1:da:10:62:1c:21:fa:8b:a5:
b5:a8:4d:ac:4e:cc:f0:ac:ad:5b:55:b0:70:37:cc:
91:bd:6f:eb:eb:c9:0e:ff:f7:17:fe:34:ed:bb:2a:
01:bd:46:2c:8e:07:31:00:3d:13:9b:20:22:c5:de:
e5:a8:a9:70:c4:03:07:e8:a9:37:09:ff:f6:18:82:
7c:71:45:66:cb:7d:53:b9:0e:41:3d:cd:36:4b:84:
3e:99:be:48:c1:75:53:3c:87:63:73:2f:58:12:d0:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153341
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:4ec0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:f1:23:96:46:d5:14:ae:64:f7:09:0c:3d:28:06:4b:31:6c:
63:34:56:0b:b0:1b:76:ca:10:08:b2:e7:40:44:b7:02:84:74:
1b:d9:a4:6f:a1:2e:d8:84:19:a2:1f:aa:db:3c:f0:53:4a:56:
1e:56:42:c4:90:dc:5f:35:0b:93:ca:43:da:12:08:91:3d:0c:
24:62:b1:ee:ea:6f:b9:de:cc:55:2c:ec:23:72:4e:9d:76:9d:
30:5a:1c:5e:26:43:4a:bc:83:fa:6c:d8:18:d4:87:06:2d:5f:
a3:9e:23:d2:11:57:3c:f5:01:9f:06:cb:3a:01:19:00:11:9e:
f4:66:29:c1:5f:29:36:a6:88:b4:f7:27:d7:95:9a:22:b9:45:
38:e2:5b:9d:0c:61:32:96:c7:78:28:1f:bf:33:79:dc:bb:2a:
4e:26:5a:fa:5b:1f:38:89:12:05:26:43:b1:10:25:26:6a:ae:
3a:ff:66:d9:7a:4d:ce:c6:ef:ae:37:7e:23:ea:15:3d:48:bc:
0c:05:36:e3:39:fe:82:4d:d0:3d:9d:ae:12:50:a9:7b:cc:44:
20:fa:9c:1c:ef:d7:98:cf:42:57:74:e8:3a:53:fa:07:c8:79:
0b:2e:6a:d8:00:19:fa:58:f5:44:56:84:d9:b1:c3:b6:b4:f4:
64:44:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:16 2024 by rpki-client on console-ams.rpki-client.org