Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer
File: StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer (raw, json)
Hash identifier: /5Mqoge7Gm9vDlopqaCIR5kO2Rakq/Msnw0DrnCeRfE=
Subject key identifier: 4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DEA0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Feb 2024 22:25:31 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 45.124.8.0/22
IP: 103.247.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122528 (0x1dea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 12 22:25:31 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:0e:0d:ea:24:40:62:38:c1:45:6a:13:47:
9a:0a:16:29:98:12:b6:01:8b:97:ac:94:58:ba:db:
f7:f0:b5:33:4b:52:02:2e:43:c4:c3:84:12:14:1a:
35:ab:da:9e:5a:23:dc:a1:97:a5:a8:d0:c1:c2:4e:
d1:20:8c:0a:47:4a:59:dd:eb:58:2d:0a:70:42:18:
c1:f3:98:7f:48:37:7a:4d:9b:a8:bb:a8:0f:1f:a9:
ca:d3:f3:76:13:2e:0d:82:96:2f:41:f4:ab:f1:c8:
14:3d:61:c6:33:92:3a:c5:0b:df:6f:27:d7:31:b3:
34:8e:ff:52:60:a4:b1:fd:cc:f2:f0:57:8c:9b:05:
49:20:5e:43:d9:f4:75:57:37:42:b2:98:be:74:e9:
5b:58:70:12:aa:84:fc:8d:23:7f:6a:7e:19:ce:ba:
7b:73:30:55:a4:dc:84:77:53:93:84:52:72:15:1b:
ca:65:16:4c:c8:44:51:c1:ca:59:05:a0:63:b5:72:
b7:99:6d:4a:d9:6c:47:8b:b8:67:3e:12:9a:63:1b:
fc:3a:82:08:71:7f:1e:30:4e:1b:4d:99:25:d8:96:
84:32:f6:cb:ed:bf:2f:f6:74:93:82:6e:98:97:b2:
66:58:88:5b:18:22:dc:68:56:63:fc:37:88:54:cd:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.8.0/22
103.247.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:75:0a:17:ec:eb:4b:c2:8d:1a:35:95:d7:73:c5:45:4d:66:
a3:a1:fd:b4:9c:7c:c8:69:b0:15:33:85:fc:bc:9b:41:1f:45:
89:41:67:71:51:21:e6:48:35:f8:70:dc:31:72:4e:cc:42:fd:
dd:12:93:6f:3f:71:b9:2c:2b:ba:1c:31:d4:8c:e4:0a:ff:20:
56:97:87:21:0a:8c:44:f1:08:7b:ad:43:af:e8:09:99:93:93:
5c:5b:56:72:1c:70:80:5f:3f:02:cf:47:c8:b1:c3:29:e8:45:
9b:6e:50:b0:a6:ae:2b:9b:6b:a4:32:66:c5:77:b2:66:2c:6a:
8c:e1:88:e6:53:87:26:64:e2:94:e9:e1:8c:8f:bf:40:86:e3:
a2:18:48:0a:78:28:0f:11:cc:b4:db:14:e4:d1:79:cf:63:c1:
b6:00:7d:ba:05:ed:f1:d1:59:36:cc:ba:ff:db:9e:b4:b3:1b:
a3:6c:26:01:91:d8:92:60:36:97:9f:bc:d8:3d:c2:79:5a:1e:
5f:b8:e1:db:c4:03:ba:55:b8:3a:80:4a:00:b4:1a:79:ed:67:
e2:b1:92:5c:43:f0:af:a6:a8:9f:20:0f:e1:55:be:00:ee:e8:
94:54:5e:49:9e:ec:ef:d0:f9:89:75:cf:2c:0c:2f:b4:fa:4d:
d7:42:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:18:36 2024 by rpki-client on console-ams.rpki-client.org