Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
File: N02aLIMvI0S92MpAYxF5P2bUxzU.cer (raw, json)
Hash identifier: 9PjSKlwAUTQ96ga7S14hIAWVR2NW5Bw5fnGGNBM+N7U=
Subject key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F51C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 May 2024 02:19:30 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.116.4.0/22
IP: 2402:f2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128284 (0x1f51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 31 02:19:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:11:d9:2e:a9:dd:d1:9f:fe:fc:be:e9:06:
f3:ae:8a:47:6d:5c:38:09:c2:cc:77:32:de:b4:9f:
03:9a:92:4a:4d:6e:47:58:a9:39:43:bb:cc:e2:ca:
ea:eb:a5:c1:3a:f6:d3:69:e4:04:8a:7a:47:99:40:
45:98:0a:e6:a4:94:57:01:b3:d8:9f:72:d1:87:2e:
32:67:95:82:a0:0a:3d:42:fc:78:88:e0:95:1c:e0:
2b:90:f8:b5:eb:86:35:14:3a:10:33:8b:28:2f:8a:
a6:ae:08:c7:5f:39:0f:9f:d6:8c:3b:d9:81:8b:47:
6e:15:13:e8:1c:b9:6f:8c:f0:73:2e:4c:ed:0e:9b:
20:78:38:8c:a0:38:cb:04:02:80:77:72:a2:64:ef:
3c:59:80:d0:66:5d:33:72:e1:be:56:0d:12:69:b0:
de:ff:6b:63:22:89:72:ec:d3:29:51:50:65:a5:0c:
fb:f6:1b:e7:d1:21:f9:08:75:88:68:1f:c9:e0:6f:
1f:6a:6a:0e:7c:35:45:84:48:33:d8:a5:21:57:a8:
ce:36:53:d0:a7:55:8b:b9:97:0c:90:c2:82:85:e8:
e9:23:2b:f0:63:44:b1:2b:44:f3:06:d3:a1:bf:cb:
b2:09:be:f1:94:0b:2b:fb:e9:05:c0:72:a9:c4:04:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.4.0/22
IPv6:
2402:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:42:1a:da:fc:19:d4:f5:28:1d:c1:df:31:40:43:ab:b1:d6:
c2:fe:96:c3:02:d8:12:d9:89:c2:80:37:62:ed:15:d5:20:d5:
44:ad:6c:a3:a3:9b:63:9b:a4:aa:57:00:87:d1:ee:66:3d:ea:
05:c0:94:39:0c:61:0b:02:3c:30:6f:2d:d1:06:9d:f8:dd:6c:
9b:05:01:88:89:e6:21:f7:6b:bf:56:9d:1d:2f:3b:43:17:3d:
dd:7c:13:5e:1f:d7:02:fa:f8:e2:64:ef:60:8a:ab:22:93:16:
9f:ce:c3:7e:66:c4:80:5c:b0:32:27:5b:d5:21:c3:ff:ac:14:
ac:c8:14:21:00:58:ac:cf:49:b5:49:0e:14:41:e2:4f:01:e0:
1b:68:20:7c:55:b9:08:fd:6a:bd:37:b1:aa:26:eb:80:45:91:
9f:4c:61:3d:11:e9:de:45:da:ae:28:ac:4b:5d:8c:6f:44:13:
4d:04:d8:32:9a:64:55:35:0e:7e:1e:d0:98:7e:a2:07:36:34:
c1:e6:05:f7:55:9d:a4:55:ed:06:25:c2:3a:1a:bf:3e:b4:6c:
bc:2d:cd:e9:09:eb:79:4e:a7:6a:ff:6a:3b:ad:31:a1:46:9b:
8f:64:f1:e8:ca:c1:93:d3:a8:b6:19:33:8c:63:ab:15:8e:cc:
41:80:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:50 2024 by rpki-client on console-ams.rpki-client.org