Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
File: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer (raw, json)
Hash identifier: Ro0E4emdeIBCyIj1Xb4aGqG6PlTKCt7jbe7cCrK8LSc=
Subject key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F358
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 May 2024 06:41:47 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 152647
IP: 202.61.112.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127832 (0x1f358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 23 06:41:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:21:c4:cc:0f:79:53:0d:d4:48:78:46:57:
db:90:f6:b7:c9:52:38:66:79:17:af:07:38:a7:87:
b6:1b:ce:f4:f3:64:3d:96:bd:b4:7e:7a:91:da:e0:
bb:db:1a:e5:07:02:8c:ad:b7:a3:55:67:d5:68:17:
ec:07:94:ad:2d:11:c8:3c:a3:fb:02:1d:a0:15:89:
00:18:08:ca:8b:6c:4a:dc:fa:20:10:d2:af:73:f8:
ae:df:ba:61:2a:c3:95:57:c0:92:3f:4f:b2:1b:c6:
50:92:39:44:28:22:34:30:18:2f:a3:8d:f9:01:4f:
67:0a:60:dc:c2:4d:b2:85:93:5d:b2:a5:4f:52:31:
3b:cf:65:88:0d:a5:da:cd:9f:78:8f:2e:3d:38:73:
a7:d3:a4:07:77:85:72:32:a5:be:ae:29:9d:f8:96:
9f:f3:f1:c1:65:47:99:8a:88:07:ba:b1:7a:06:87:
ea:30:c9:a1:3a:e2:1c:79:80:b5:a6:03:0d:32:7c:
8b:97:85:d8:26:b1:9c:da:42:e8:2f:33:77:90:8f:
8d:96:98:2d:4b:44:1d:20:d9:d4:7c:e6:51:c2:96:
4a:67:10:d5:b8:1b:e0:61:11:0a:87:a0:a2:02:a8:
51:ac:f0:4e:51:71:48:31:cb:4f:b9:8b:5b:c9:c5:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152647
sbgp-ipAddrBlock: critical
IPv4:
202.61.112.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:1f:79:60:ef:51:fa:58:80:26:de:97:11:83:43:71:0d:a1:
78:29:f4:c4:a8:84:5c:ca:8e:b0:17:75:2e:3d:38:0e:1f:94:
d2:24:9d:f2:58:05:73:e2:35:1c:0a:e0:b9:15:13:08:8d:ca:
d9:01:5d:ab:cd:26:03:fa:3b:81:40:93:09:89:3b:d5:79:f5:
c4:fc:f9:9e:58:cb:5e:a6:37:f0:26:ab:7a:c9:f6:d8:51:a4:
68:9d:26:63:ca:32:71:dc:79:a1:fc:5c:26:4b:8c:5c:11:ca:
7d:b8:73:65:01:ec:5c:dd:fd:83:c8:58:c0:a5:01:a8:eb:56:
69:43:0a:f4:60:22:9d:a3:3e:67:72:88:a0:fb:68:c3:f6:63:
33:0d:6b:82:16:7d:4b:49:c5:f6:a1:25:1e:80:50:f6:a7:c6:
cb:a9:0b:7e:1f:9a:f3:64:fc:2e:4b:a6:00:58:94:cc:df:ff:
0d:0d:65:d5:b9:66:95:a9:e3:66:9a:b4:ae:f2:48:d0:75:35:
56:3e:f9:28:c7:7d:25:f0:69:4c:92:3f:60:5a:c1:d5:58:28:
4d:3f:25:27:21:08:31:5b:f0:7f:ff:33:52:2f:bc:0a:87:65:
75:5e:09:73:65:a5:d0:38:35:0f:88:5b:e8:1c:34:ca:64:32:
59:5a:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:38 2024 by rpki-client on console-fra.rpki-client.org