Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
File: PurfFFrim0gkCj-6OvvZSajxU10.cer (raw, json)
Hash identifier: PBcg08v3WJzKPgymOJUvN3cZmPGfG/IHGeAD100F90M=
Subject key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D2C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Dec 2023 20:54:10 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 203.13.208.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 16:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119488 (0x1d2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 18 20:54:10 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:b1:93:9f:0b:83:f5:cb:d0:8d:2d:06:1b:
6d:35:e0:1b:42:d0:fe:14:cb:88:97:7d:a6:95:a4:
1d:10:ce:cb:26:ef:39:2c:88:0c:e1:3c:9a:57:2b:
44:43:d1:70:06:df:5a:10:94:7d:d9:da:25:89:4c:
2f:7f:10:f9:e5:59:a6:64:0b:de:16:28:01:e1:c5:
14:31:f2:cf:0f:6f:43:03:3f:1e:51:49:09:56:63:
fd:a5:63:52:d1:42:5b:28:39:9d:cf:7c:fe:02:8d:
19:d2:33:7c:b4:ca:74:c2:c8:53:4b:d7:32:81:6b:
9b:b0:85:bd:90:1e:22:a8:41:b9:bb:da:5a:36:c6:
e8:01:05:3c:69:1c:c6:3a:77:fb:23:d2:5b:3d:6e:
b8:5c:45:64:4f:30:d0:f7:cc:5f:36:b2:26:49:20:
65:d3:9d:7d:9b:0a:b8:c5:cc:26:ba:2a:ed:0b:97:
54:85:92:c9:76:2c:95:6e:30:a8:78:d3:3a:da:e6:
17:6c:eb:7a:fb:76:f5:7c:6d:a7:22:3c:5e:97:1c:
db:72:da:11:3d:20:ce:90:d3:e3:25:2f:c9:60:26:
9e:54:ec:a0:06:fa:d5:87:17:5d:bb:01:02:b3:83:
6a:37:89:6e:f7:75:ba:e3:76:cd:b0:af:e8:d8:fd:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.13.208.0/21
Signature Algorithm: sha256WithRSAEncryption
74:1c:ed:ab:39:f9:71:a3:e1:15:1b:8e:5a:eb:42:1d:27:89:
f4:2f:b2:a5:57:24:c6:e5:39:cc:dc:b0:23:20:50:51:a2:9c:
b4:92:a7:6e:87:6b:7d:f7:0e:72:70:f6:52:f5:ad:3b:27:7c:
8b:a7:3f:05:c9:0b:70:c9:18:28:ea:ba:43:8f:1b:b1:07:12:
e6:9a:14:8e:b9:88:44:1a:95:eb:22:59:87:cc:41:04:b7:b9:
02:41:38:47:36:63:35:74:0d:07:16:21:a9:10:3d:82:ac:07:
42:68:3b:47:c3:51:e2:9d:fb:54:91:0d:a0:06:90:82:8a:dc:
5f:c9:ca:f6:b0:be:29:18:cc:91:9b:69:e8:15:8f:2a:a0:e1:
5d:9e:a5:9a:de:74:ae:09:4f:0f:8e:c8:dd:10:cf:1e:bb:0a:
66:9b:92:eb:ac:22:03:9f:f2:6e:e8:68:ab:f0:15:ec:a0:c7:
aa:ed:85:9f:be:ce:c9:bb:52:e9:ea:b9:68:c4:31:2d:e5:6f:
b3:4a:74:68:51:8b:37:76:82:5f:34:29:04:7a:8c:76:ec:c0:
fa:96:10:85:8d:3c:4a:ca:e3:77:5f:64:31:ae:b8:bb:99:15:
0f:5a:3c:a8:93:5e:57:76:9d:2b:c9:6a:1f:65:12:92:69:13:
99:a6:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:44:48 2024 by rpki-client on console-ams.rpki-client.org