Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer (raw, json)
Hash identifier: z0eo5ElWdm3RAUkpS1ngKDNbZygvvOyelkE0XDy0nEM=
Subject key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A9CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Jun 2023 17:25:07 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.91.8.0/22
IP: 123.253.24.0/22
IP: 2401:c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109002 (0x1a9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 13 17:25:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:7b:71:7a:8d:0d:e3:c6:8f:e8:23:10:7a:
19:c0:af:9f:e8:b2:bb:17:2f:1f:c9:7d:02:58:71:
24:4a:a6:72:ea:23:de:86:76:81:bd:46:1a:3c:45:
16:4c:4e:90:c7:04:f5:47:80:36:94:3e:75:6b:ee:
bb:6d:65:43:f9:c8:16:c2:8a:a8:f7:f5:71:d5:54:
8e:b3:33:b3:cf:40:d9:a9:9f:54:1b:b7:01:e0:d6:
0f:c9:d2:2f:ae:5a:a6:74:e5:e7:03:16:ab:2e:ff:
e5:03:42:af:45:ae:fa:c3:88:2f:60:a2:fa:9b:21:
58:69:bf:22:1c:6a:4d:b2:dd:2b:d3:b0:43:d5:38:
64:4b:5c:3b:1d:07:ac:c5:bc:0b:6f:67:dc:80:65:
71:f3:0d:63:49:20:dc:3d:44:c8:ef:bd:52:2f:49:
97:95:3b:98:43:23:9e:54:e1:ee:e0:fe:12:d8:63:
e5:58:77:85:da:d4:d9:db:f2:ee:d4:78:59:a7:a9:
c0:0a:0d:1f:6e:e3:a5:73:b1:e7:86:73:68:92:a6:
3f:8f:64:db:2f:62:cc:ee:ae:bc:0c:93:ae:33:c6:
32:da:74:bc:ef:f4:4d:5c:29:ec:93:ec:aa:47:4d:
c0:08:87:f7:dc:aa:93:a1:07:e5:29:47:52:a0:2f:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.8.0/22
123.253.24.0/22
IPv6:
2401:c0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:a9:e5:27:07:9b:cc:00:3c:5a:b9:17:97:93:8b:68:49:0e:
69:09:66:5c:fc:b7:f3:56:6d:b2:fe:ce:df:a5:2a:97:65:65:
d6:2b:8f:ef:f2:a7:0c:20:3f:c9:b5:b0:07:23:c9:67:78:dd:
84:51:56:e5:bc:2f:a0:f6:5f:c2:e9:96:a9:15:97:49:4a:df:
9b:eb:cf:b2:c6:52:81:41:33:35:42:f0:c4:d3:cb:29:a6:59:
95:1d:cc:20:cf:f4:3f:a4:d3:79:c7:86:f5:ab:03:21:29:c9:
69:4a:9f:d2:1b:97:a4:14:b1:01:54:17:67:0d:94:1c:be:4d:
7e:53:d2:9c:62:d1:3a:c7:6a:e3:24:3f:51:a3:dd:24:fb:80:
08:18:c6:ba:a2:b8:6d:85:44:42:db:1f:6a:6c:91:d8:08:3f:
ec:1f:a6:41:a8:0b:1e:56:9a:29:98:22:02:69:cc:af:ad:9d:
eb:8c:d9:e1:7b:86:8c:cf:39:fe:79:77:e4:7e:8f:ac:a8:c4:
d4:9e:d0:0b:2d:78:f3:8c:56:00:8c:3d:d6:bb:02:b2:d7:16:
b6:4b:29:80:87:d4:7f:d3:75:21:33:af:7b:df:1a:b5:b5:0a:
27:f1:85:82:42:0f:6c:4f:46:d8:68:61:4a:7b:25:ab:ac:40:
80:e7:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:21 2024 by rpki-client on console-fra.rpki-client.org