Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer (raw, json)
Hash identifier: eLvkWH92WT7BhO028qCVUojkG/2pi/4OwDfaJH/2whU=
Subject key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021ACE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Nov 2024 19:37:39 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 203.6.250.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137934 (0x21ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 11 19:37:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:47:f8:7b:18:2b:96:7b:10:b6:f5:22:ec:
cd:80:5c:b5:21:8a:9a:06:57:ec:6e:4b:c4:c3:8a:
05:50:45:ab:a0:a6:d0:4b:f7:82:7b:27:fd:40:f3:
c4:e4:28:44:5d:75:74:be:39:6c:4a:d7:ae:c0:85:
34:ac:0d:7d:e6:f7:82:d3:66:06:e3:ef:ba:de:33:
a3:b1:f9:5d:41:89:6e:c5:f7:d8:aa:f8:07:dc:93:
e0:b6:60:ec:23:ef:3e:cf:82:1a:5f:d2:24:cd:26:
79:18:94:6d:e6:2a:a8:c5:aa:ee:2e:6b:36:da:17:
af:49:70:1d:59:66:51:97:0b:2f:1e:08:70:5c:dd:
a1:62:3f:5d:4f:92:19:ea:88:e6:d9:af:04:e0:df:
42:4e:68:76:87:f9:f2:09:d1:4e:9b:71:6a:b1:56:
58:16:1c:e8:45:78:8d:36:df:b9:e7:db:9b:30:a0:
4f:cb:42:e7:fd:37:72:4e:ef:3b:3c:7a:82:9e:6d:
12:1a:82:8b:8d:89:bb:1b:ed:bf:a7:b1:ee:26:5c:
f4:43:6c:87:31:9b:66:9f:22:55:26:07:b7:3a:d6:
50:e3:1d:66:c0:e9:59:9a:6f:67:6d:00:62:88:77:
fb:07:f8:ba:dd:79:eb:d2:44:e4:a3:ee:4c:33:5e:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f7:4d:66:e2:68:d0:f8:5e:4e:2f:de:b1:22:02:70:35:f5:
28:f5:53:55:26:cc:02:96:ef:17:d5:54:0c:c9:3a:49:a4:0b:
09:77:0f:b1:da:5b:1c:08:28:68:ed:17:6e:83:d4:5a:ca:aa:
09:77:97:5c:7d:b2:f0:92:1c:b7:ff:e2:cc:95:1a:e7:20:e9:
8e:ea:cf:d7:51:df:dc:a6:a3:6b:54:6e:c3:2d:ab:08:d1:92:
97:bf:3e:8f:37:51:f0:a5:0a:8c:2d:c0:99:04:cc:21:b2:ec:
0d:ab:66:33:43:71:1a:ae:fd:5e:70:82:51:0a:f7:cb:eb:67:
db:96:ad:4b:3d:ed:cf:85:23:44:41:65:ca:58:b6:1e:dc:ec:
11:42:2b:7f:e0:98:2b:3c:b9:68:7a:82:91:3f:7b:8e:c0:a5:
4c:3a:36:d8:79:68:24:41:05:2d:64:41:ed:26:72:ac:3a:f4:
a0:58:6b:94:cc:c3:c5:cb:4d:68:f9:2d:aa:cc:1f:b0:a1:d6:
78:7a:5d:cf:e6:2b:62:1f:41:06:2c:22:b2:98:ee:9f:16:80:
ff:56:0b:75:a8:95:67:6f:d4:e0:28:c5:c6:c6:2c:4d:04:52:
32:c5:25:74:a7:d5:a4:41:0b:9e:f5:9a:d7:b2:41:e1:97:1d:
c4:21:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:40 2024 by rpki-client on console-ams.rpki-client.org