Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
File: QIyZnDwewBZElFs0d6nyI061eRw.cer (raw, json)
Hash identifier: fDe3dX4NTmSUccClblhWag0SpIHNf2v93l5MheJT7mM=
Subject key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021536
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Oct 2024 14:34:53 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 17992
AS: 24218
AS: 131103 -- 131104
IP: 61.11.208.0/20
IP: 116.0.96.0/19
IP: 119.110.0.0/18
IP: 119.110.128.0/18
IP: 124.158.224.0/19
IP: 202.76.224.0/20
IP: 203.223.128.0/19
IP: 2001:4498::/32
IP: 2401:5000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136502 (0x21536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 22 14:34:53 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:46:56:7c:ea:64:33:d0:5b:da:5e:20:12:
a0:5e:ff:be:a5:56:8c:d1:ed:cd:09:8a:db:59:10:
2d:06:d7:7c:b4:db:4c:de:5d:39:8b:22:6e:66:54:
fb:f9:08:b0:df:0d:13:14:92:5a:32:dd:34:24:ab:
16:ca:a1:2e:b2:a8:c0:c3:f0:a3:31:90:0d:a6:da:
a6:79:06:5e:20:ce:02:e3:9c:4f:1e:47:f2:db:f2:
d9:9b:5b:fa:d8:f0:0d:4b:8f:02:4f:58:6e:ba:a4:
c5:41:ee:2f:07:10:35:13:11:f7:cf:e1:64:d5:78:
29:3f:75:cf:ae:63:21:cb:92:49:1f:d0:29:76:40:
50:82:bb:db:58:72:2b:14:68:79:75:fb:2d:d9:ed:
62:2d:63:d4:01:3b:d2:cb:72:a0:42:9e:5f:2c:7d:
b5:47:14:37:1a:ef:e8:c8:08:21:9e:ca:70:75:85:
bd:f6:3f:32:5f:d8:f1:01:b7:7f:98:cf:e8:3c:bb:
d6:27:96:85:ef:75:f2:d2:88:62:f9:16:0e:58:15:
26:4a:5b:4d:15:ae:80:f9:c9:a6:e4:50:35:e9:f4:
ba:57:81:90:fa:78:05:c4:b7:60:fb:47:00:1a:1a:
06:24:f6:44:a4:2c:78:c2:5d:9a:53:3a:37:a6:cc:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17992
24218
131103-131104
sbgp-ipAddrBlock: critical
IPv4:
61.11.208.0/20
116.0.96.0/19
119.110.0.0/18
119.110.128.0/18
124.158.224.0/19
202.76.224.0/20
203.223.128.0/19
IPv6:
2001:4498::/32
2401:5000::/32
Signature Algorithm: sha256WithRSAEncryption
b9:e5:e6:df:55:43:f5:b4:68:ac:b2:66:4c:ec:ea:f6:be:00:
49:86:e4:7f:69:0f:77:01:b7:96:d4:43:28:c8:f3:3f:18:7d:
8f:22:bc:55:21:04:a8:e4:1d:64:00:18:1a:e0:1a:90:00:59:
99:05:d0:e6:65:2c:0f:e8:96:df:35:b2:cf:88:e8:20:2a:cc:
c2:ff:d0:b1:7b:c6:28:e9:48:eb:4b:e3:e8:44:85:a6:b8:d0:
ec:be:b8:84:c1:77:ac:c8:c8:b0:d3:a0:cb:55:fd:64:f8:1e:
8b:68:82:e7:02:1a:e9:5b:ac:41:28:0d:2c:c7:56:94:75:ea:
44:ac:d0:f0:e6:3d:65:c4:30:f5:1c:d1:e8:87:b0:51:90:b3:
ca:d1:81:ba:30:63:c1:81:38:e9:34:24:6f:62:ff:d3:c3:ad:
ed:14:c3:57:cc:f6:a6:a9:a1:19:a8:b1:eb:e4:30:b3:fc:48:
19:5e:f7:df:b4:3e:7e:df:d4:f9:ab:ab:4c:49:cd:df:10:a6:
d4:23:fe:e6:94:ce:16:82:04:3c:ce:e7:1d:d3:0a:83:f1:50:
b7:03:c0:de:29:65:b7:2d:26:f5:07:8d:39:90:36:0f:d9:cc:
bb:1a:b5:a0:e2:22:5d:37:a5:fb:4e:e3:f8:da:af:ee:2b:de:
30:08:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:23 2024 by rpki-client on console-ams.rpki-client.org