Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer
File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer (raw, json)
Hash identifier: MGoA9ideR0aJ8+4ZiZ60IRBR+IlTvLp5A7goztZi4to=
Subject key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E01C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 Feb 2024 04:04:43 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152301
IP: 2001:df3:54c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 23:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122908 (0x1e01c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 22 04:04:43 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:68:82:75:77:20:1e:fb:4b:7c:ba:3e:3c:
93:fa:1b:40:21:bb:a0:d3:a8:dc:11:c9:9a:5e:c8:
72:d2:c1:88:c5:d7:95:67:f6:88:b4:4a:83:fb:4d:
aa:40:b7:27:b7:72:88:20:b0:c7:21:78:b5:6d:9a:
ed:ea:3c:88:0c:6e:66:87:41:03:9e:8b:c5:30:56:
27:8f:f7:51:d7:d6:ba:85:56:21:38:39:ce:59:a5:
be:e1:35:b4:0a:3b:cc:f7:0c:e5:49:30:55:27:2e:
b7:dc:63:9a:51:93:e9:6f:06:0d:bc:76:74:49:79:
cb:0b:04:89:61:41:4b:52:82:0b:97:dc:3f:3b:c0:
29:9b:b9:42:51:52:6d:f8:6e:58:4d:2b:0f:9e:9f:
71:2f:e0:cc:4c:25:36:43:31:93:29:94:ae:9b:d6:
3a:6a:4e:3f:da:e7:7b:e4:c5:a8:a1:a9:a6:70:8b:
9f:e5:00:99:b2:56:46:a3:6f:63:5c:2e:ec:86:f5:
10:60:12:62:d4:61:c0:16:77:5d:5d:4c:24:c2:d2:
06:88:b1:01:17:12:40:96:1e:df:3b:7e:bd:b8:24:
c4:11:c1:63:dd:c6:f8:57:6b:6f:52:da:09:2f:4b:
50:0e:75:b2:be:c0:8d:8b:fc:3e:48:46:27:a3:01:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152301
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:54c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:69:a6:a2:16:a3:03:30:8a:da:9c:47:f2:50:d4:c7:b2:37:
15:c8:84:f9:2c:10:9b:35:23:a8:9b:4e:50:6f:02:5f:75:6e:
e9:b2:a1:c6:5f:55:17:5c:7a:eb:75:b5:b8:d0:f1:f9:2d:47:
1f:43:bd:e9:89:e5:7e:73:8b:7c:d1:78:19:ae:a3:d7:75:a2:
32:9a:44:07:bc:8f:86:1d:86:7f:68:c9:6a:32:89:a1:69:74:
dd:09:80:c4:08:f7:bd:c9:9f:a8:ec:ce:ae:e0:97:c3:d7:26:
3e:ef:b8:8c:0c:cf:d8:24:94:25:04:69:83:7e:b7:77:80:fa:
74:96:f7:c4:16:24:c3:96:07:af:8e:52:0d:36:73:f5:ba:01:
98:13:ad:b8:68:ec:e5:18:5c:cc:dd:a9:13:b2:58:3e:36:17:
ec:80:8a:0b:15:ac:7c:dd:d6:4a:fb:5b:76:e3:13:5f:c8:84:
13:a8:0d:23:a8:61:76:3c:01:6b:58:0a:34:a7:43:51:40:d9:
b1:b9:9f:aa:f1:97:a8:3f:f3:f0:24:b1:8a:c7:70:70:a2:cd:
f0:27:26:f7:f1:62:fc:15:85:ca:1b:55:c3:4d:ce:32:e9:5c:
72:4a:a9:f1:c9:9a:cf:db:9d:6c:d6:cc:c6:38:10:0f:4d:84:
71:e0:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:10:51 2024 by rpki-client on console-ams.rpki-client.org