Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
File: M1EvnGdsMJ4181WPA7muZBm_dBU.cer (raw, json)
Hash identifier: EwjYZ1lB0R6IvFEzZ+RgdLogME592+F96mF8g4YEUYY=
Subject key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F0F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 May 2024 21:57:39 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.69.78.0/23
IP: 2400:f960::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127216 (0x1f0f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 21:57:39 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:d6:03:ad:68:c8:5a:be:94:e5:f4:b5:80:
81:aa:2f:c2:37:ba:45:8c:60:8f:70:4c:dc:83:dc:
12:d7:29:ea:9e:d1:39:9a:3e:ec:47:83:f6:ee:ea:
c9:0a:7e:ae:a3:85:42:b3:d0:5d:e4:e3:50:1f:84:
da:09:6a:a7:b2:5b:37:b5:59:d1:32:50:3f:57:31:
10:dd:be:cd:da:29:46:33:f3:ed:53:35:db:2a:fb:
64:fb:9d:c5:b1:4e:38:c1:c0:8f:c2:42:dd:4b:3d:
b5:74:37:f0:e9:43:30:c3:0a:da:5c:c5:c1:90:80:
02:31:01:45:66:b7:77:a3:5e:64:d5:da:c1:eb:80:
64:33:f2:d4:5f:06:89:2f:cf:39:03:87:05:0f:74:
4b:6a:d5:87:c8:8f:45:9e:68:f3:a8:1b:4b:d0:0d:
1b:a4:34:b6:7e:8d:8c:7a:4d:70:5c:27:65:0e:97:
82:58:6f:c4:15:5a:3c:ca:6b:b9:2e:06:f5:f4:0f:
84:82:5b:85:26:e0:a5:cc:b2:ac:ab:dd:e9:77:b1:
bf:11:a0:6b:13:75:97:28:f8:62:7d:76:f8:65:8e:
76:41:18:e1:5a:f1:e4:81:7e:bf:28:1e:33:b8:75:
13:89:71:5a:fc:85:a6:58:26:d8:96:ee:5a:2b:14:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.78.0/23
IPv6:
2400:f960::/32
Signature Algorithm: sha256WithRSAEncryption
41:f2:82:86:7f:97:6a:c3:80:e9:cd:8f:3a:60:a3:be:ab:4e:
5b:6a:d9:c1:15:4b:ab:2c:ad:9e:d5:e6:a8:3c:a2:01:9c:07:
2e:1a:ec:28:bc:62:7f:d2:a1:10:28:8a:ab:76:14:28:87:90:
46:1d:8d:89:4c:a3:fd:62:58:f9:d9:65:d2:9f:f5:b8:ee:63:
16:0c:b6:f8:00:fc:89:52:8a:c9:c9:fc:46:1e:48:5b:35:d9:
0c:39:21:a9:69:4c:ab:d6:7e:1f:fb:79:ec:ea:2a:41:43:b3:
94:80:c1:1e:bc:20:82:d8:d8:4f:34:b2:c0:64:10:d1:8c:e9:
fc:61:22:95:6c:d7:88:28:89:43:62:fa:02:39:44:0b:2b:0c:
72:84:49:fb:e2:20:86:c1:71:95:e2:72:62:b2:b8:f7:b5:b9:
a1:8a:ff:31:21:29:c3:17:1d:29:cb:b9:12:2b:0d:6a:3b:28:
bc:36:08:0b:c7:87:7a:fe:08:93:1f:55:e2:b1:69:8b:53:90:
e4:f7:61:a3:fc:72:b5:3e:04:d8:52:6a:9d:b2:2d:f6:c4:9b:
36:bc:19:43:7f:1c:cf:b4:00:04:ae:98:1c:5f:b8:ae:d0:71:
a0:7c:83:aa:16:46:32:1d:d5:4e:67:cc:4c:a2:36:f0:15:a0:
1b:8d:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:43 2024 by rpki-client on console-fra.rpki-client.org