Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer (raw, json)
Hash identifier: kApHmBJtYjaWKkb7rPHA/P3yFgjIUWifoAzXrKkxq9k=
Subject key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 21:33:40 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 203.21.207.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118055 (0x1cd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 21:33:40 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:ea:40:8b:2b:8f:3d:2f:a0:be:71:4d:38:
46:a6:05:c3:86:2b:2c:36:87:a2:4e:6d:ef:eb:ea:
d2:41:0d:c9:a8:bb:5d:ca:0a:94:ed:a1:82:77:ce:
87:e5:0d:c3:50:24:95:05:cf:20:ea:ab:ed:9e:10:
a8:fd:60:e2:f5:51:f3:24:ca:93:bc:94:e5:7e:ea:
10:d9:b8:13:67:4c:91:cf:03:eb:2c:42:d3:3e:da:
7c:d2:f5:33:0f:be:1e:5a:57:09:25:e9:ee:49:bd:
8b:5a:14:19:3d:ff:6b:5a:21:db:bc:6c:de:dc:a7:
ec:cb:a4:84:9e:2d:8f:87:0f:4f:e8:6e:03:c5:4b:
f2:42:97:80:b8:37:f8:e6:3c:6f:5b:97:81:31:62:
e8:4f:2e:4e:ec:36:11:c2:79:9f:c1:0e:ee:49:6b:
4f:be:79:ea:a6:fe:db:b7:cd:9b:95:9e:9a:1b:87:
da:4b:0d:54:82:f7:88:c2:9c:06:fd:80:5c:bd:6c:
1a:17:4c:e3:d4:97:6b:d6:e6:a1:d8:8a:5c:17:0c:
74:05:f7:70:d0:cb:eb:15:fa:97:17:05:87:f3:ff:
e1:a8:e7:f4:47:22:11:08:53:84:78:09:41:81:15:
1b:61:d7:0b:d4:e6:f5:3f:d4:41:f2:6e:e8:e0:82:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.21.207.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:29:75:b6:c6:f8:b7:ed:dd:1d:59:8a:6e:fc:1e:0e:23:4b:
40:49:91:5f:82:4d:95:36:0a:0c:ec:80:b1:59:66:84:ff:b8:
50:3f:88:24:c3:56:75:53:c0:f6:8a:00:b9:9e:f7:9d:a3:44:
93:81:41:b2:90:0e:97:2a:9b:f2:c8:74:db:15:ed:df:19:c6:
c9:a4:ef:e7:11:ab:e6:cb:49:ba:17:30:b0:75:23:ee:77:aa:
af:a5:f0:32:6e:ba:50:9c:79:4d:24:74:49:75:c0:7b:18:18:
77:44:b6:64:f8:49:2b:55:47:aa:05:d3:d2:33:be:2a:de:53:
62:1b:af:4a:49:f2:3f:43:71:32:7f:26:a8:d4:71:d6:9b:7c:
bf:f7:1b:fd:68:92:df:bf:43:66:76:6e:0a:40:94:a5:73:dd:
d0:55:11:1a:6d:0f:93:39:a0:ee:57:2a:e3:7a:4e:f3:55:66:
e1:e5:1f:31:26:4f:46:6d:fd:f9:2b:53:bd:b1:8f:d8:a7:d2:
b3:04:5e:09:a7:39:05:78:16:b5:39:83:91:60:8e:5b:27:eb:
78:a7:7b:99:bc:ff:0e:58:71:98:1b:e1:34:28:16:58:3d:3b:
67:fd:28:d1:f5:cb:54:ec:25:92:0c:a9:34:a6:ec:83:dc:b8:
ac:f0:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:35 2024 by rpki-client on console-fra.rpki-client.org