Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
File: Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer (raw, json)
Hash identifier: 0uF4prjCQXmK7hepKiMJWoaXHoIacWO61SGAwJEE1NE=
Subject key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E42B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Mar 2024 00:32:07 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.85.72.0/22
IP: 203.175.12.0/22
IP: 2001:df0:a640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 12:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123947 (0x1e42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 00:32:07 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:e8:c3:3d:11:cf:25:22:c6:a7:9d:54:71:
11:fd:d5:1f:3f:f9:03:7a:21:3c:58:d4:07:ef:13:
0f:fd:6c:a2:b9:09:27:69:82:42:33:ed:fd:9c:f2:
3c:82:14:3e:ef:bf:2d:7d:92:0b:20:73:bb:b5:fa:
c5:8b:a8:af:c9:ea:cb:10:9f:9b:5f:48:05:62:ba:
b3:07:91:97:cc:62:87:3c:d3:f8:ab:4b:f5:6c:c0:
4d:87:86:14:f6:2e:60:57:15:b9:fb:90:5f:06:39:
ae:1a:e5:d6:35:95:13:7c:81:cc:cc:49:59:8f:02:
bd:ad:49:3c:d6:3b:c3:d9:73:13:11:e2:44:94:1a:
ec:c7:44:17:b9:68:5c:d7:6f:39:2a:d6:a1:79:4c:
bb:69:87:8d:71:74:31:92:5c:5b:08:a3:3f:70:f1:
f7:93:a2:d4:c5:f3:ef:c4:c2:65:02:3d:71:12:08:
fd:fe:d5:2c:66:d2:ef:6e:d5:f4:77:0f:98:d6:d1:
6f:9c:9e:bc:a7:cf:ab:a1:85:7e:d8:89:24:bf:71:
b9:7e:37:c7:30:c6:24:ad:5d:89:8f:df:d4:f3:5d:
b4:0f:be:3f:fc:51:40:75:58:ef:ff:12:a2:0d:aa:
02:e5:1c:e1:6c:4b:92:0e:fc:bb:23:ea:da:05:c6:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.72.0/22
203.175.12.0/22
IPv6:
2001:df0:a640::/48
Signature Algorithm: sha256WithRSAEncryption
c5:09:89:2f:88:8a:b0:6f:b3:ed:99:f8:79:b0:10:44:06:23:
65:ce:05:63:7e:dc:79:ae:b3:4b:21:e0:20:3e:a6:71:e8:73:
b8:a3:ec:56:67:01:8b:0c:95:ae:49:36:77:71:e0:35:5c:22:
9c:ac:62:25:52:d0:20:81:82:d2:ed:aa:71:7a:36:41:a2:07:
31:05:24:fc:b2:7c:39:ea:4a:eb:c0:7b:33:ca:ed:20:51:2e:
ac:9e:07:99:40:07:64:00:06:43:cb:7c:73:38:9c:ff:71:2f:
1c:55:8b:b9:20:95:49:86:7c:5b:83:ef:79:5a:b5:2c:c6:90:
af:82:16:95:36:6d:4c:ef:46:40:4e:83:4c:ee:62:b8:6e:9c:
4d:6c:09:cb:38:20:7d:42:0f:5e:27:a9:dc:23:94:e6:4d:cc:
56:c9:ba:f4:5c:1b:35:82:9a:39:4d:37:f4:80:64:c0:ed:49:
03:61:9f:44:72:da:de:a5:ce:17:b1:ff:45:2c:f9:db:76:33:
b4:7b:2e:5f:76:bd:1b:bc:61:26:78:e4:04:aa:15:8e:e1:3a:
93:46:ea:17:28:c3:7b:6f:22:aa:78:4b:7d:61:cf:5d:aa:17:
45:80:28:80:2a:32:96:06:5a:1e:8c:cb:01:dd:22:ee:16:82:
8f:bb:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:24:19 2024 by rpki-client on console-ams.rpki-client.org