Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer (raw, json)
Hash identifier: T4rHjjSjwrr/D4s2qN6bh5dT5zBSGwV22cDTUs90sVY=
Subject key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B89
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 21:08:58 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 203.21.207.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138121 (0x21b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 14 21:08:58 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91ECC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:ea:40:8b:2b:8f:3d:2f:a0:be:71:4d:38:
46:a6:05:c3:86:2b:2c:36:87:a2:4e:6d:ef:eb:ea:
d2:41:0d:c9:a8:bb:5d:ca:0a:94:ed:a1:82:77:ce:
87:e5:0d:c3:50:24:95:05:cf:20:ea:ab:ed:9e:10:
a8:fd:60:e2:f5:51:f3:24:ca:93:bc:94:e5:7e:ea:
10:d9:b8:13:67:4c:91:cf:03:eb:2c:42:d3:3e:da:
7c:d2:f5:33:0f:be:1e:5a:57:09:25:e9:ee:49:bd:
8b:5a:14:19:3d:ff:6b:5a:21:db:bc:6c:de:dc:a7:
ec:cb:a4:84:9e:2d:8f:87:0f:4f:e8:6e:03:c5:4b:
f2:42:97:80:b8:37:f8:e6:3c:6f:5b:97:81:31:62:
e8:4f:2e:4e:ec:36:11:c2:79:9f:c1:0e:ee:49:6b:
4f:be:79:ea:a6:fe:db:b7:cd:9b:95:9e:9a:1b:87:
da:4b:0d:54:82:f7:88:c2:9c:06:fd:80:5c:bd:6c:
1a:17:4c:e3:d4:97:6b:d6:e6:a1:d8:8a:5c:17:0c:
74:05:f7:70:d0:cb:eb:15:fa:97:17:05:87:f3:ff:
e1:a8:e7:f4:47:22:11:08:53:84:78:09:41:81:15:
1b:61:d7:0b:d4:e6:f5:3f:d4:41:f2:6e:e8:e0:82:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.21.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:75:65:28:d2:5a:22:f4:65:9c:1e:f4:e6:17:35:fd:4d:63:
31:ef:b7:18:e5:b0:cc:3f:23:2b:bc:15:0d:91:c1:d3:5a:00:
51:5d:b0:b0:2a:43:33:45:51:b7:56:69:59:02:5c:e8:7b:db:
1e:da:f0:6c:ff:dd:8c:c4:d9:ca:50:db:5e:cc:8d:ad:91:09:
63:d8:19:1e:ad:d4:42:f9:28:48:ad:14:41:e1:97:98:2b:e1:
3c:1f:22:63:e6:80:b2:df:1b:1e:86:d3:c0:23:be:15:cd:f4:
4d:47:08:e2:83:08:98:54:44:9a:23:e9:2b:b5:5f:11:6c:bf:
24:c7:12:54:55:f0:56:bd:02:54:48:07:bc:8d:52:cc:b3:d2:
89:12:fa:7b:75:5b:7d:f6:4d:9f:85:c8:85:6b:a3:13:c6:f8:
84:bf:52:a1:16:72:52:79:34:e6:d1:2e:dc:fa:3b:1f:cf:ec:
65:8b:6d:9e:57:14:20:af:8d:fd:34:0c:a5:61:dc:6a:14:02:
6f:75:a2:2b:76:25:9f:4d:44:45:53:a6:3a:30:07:75:c5:0f:
25:76:a4:6b:71:69:f9:06:e0:2c:84:cd:67:03:e9:d4:e9:c5:
31:fd:70:6d:24:d5:c2:17:d8:a7:91:e6:62:b9:d3:0f:e5:e5:
87:a6:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:20 2025 by rpki-client