Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
File: TKAS9bToBGfvDuxPjAJEoj1WmbU.cer (raw, json)
Hash identifier: tugqllL4bUHqGdUDTWxAbfKgzl1B6N4q4D2ELePkaeg=
Subject key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020161
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jul 2024 10:05:32 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152312
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131425 (0x20161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 19 10:05:32 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:d8:45:17:6d:86:4c:96:31:06:bd:0a:e6:
d8:55:1b:8e:7b:58:9e:99:41:d7:75:82:1c:3a:a1:
f7:78:19:38:99:5f:2d:89:67:c8:ce:79:f8:84:5a:
e9:09:55:cc:e6:d4:97:5d:16:3c:69:54:73:b1:7e:
64:e9:07:4e:a1:e2:55:ce:da:60:f4:f2:89:4f:08:
36:b6:9b:9b:bf:fc:17:51:91:99:88:bf:d8:da:f6:
aa:be:42:ad:58:3f:b9:68:95:53:35:6f:ed:15:1a:
17:b1:3e:4e:0c:2a:45:6c:2f:3f:ec:c2:28:b0:62:
dc:52:37:65:01:3f:e1:4b:2b:ca:8e:14:fe:2e:cb:
09:66:c2:ac:20:40:bc:12:a6:8a:04:e7:02:4f:6b:
9d:69:48:e2:8e:3e:32:7e:26:cd:a7:1d:ac:5a:8f:
f5:d0:03:59:a0:16:e0:7c:63:cb:08:30:71:b4:9d:
c4:f1:08:1c:5d:f1:70:1b:2a:aa:a4:e3:6a:37:0f:
55:c4:93:43:f1:35:f8:41:68:d7:ae:82:f5:f7:5c:
38:df:95:7f:89:df:7c:7a:56:82:1f:0b:da:09:d5:
e6:9c:e1:d8:b5:b9:41:79:4e:1a:67:75:2b:33:8b:
7d:1a:57:e7:50:46:ed:27:5a:2c:2e:04:b2:85:eb:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152312
Signature Algorithm: sha256WithRSAEncryption
46:cf:c9:9b:f6:ca:c1:60:e1:ae:07:15:86:61:cd:86:ff:ed:
ba:72:6a:90:38:ef:e4:95:f4:7b:65:85:a9:34:bd:43:fb:40:
9b:a8:36:46:18:c9:ca:90:e2:e9:f9:f8:e3:6c:4f:d9:ca:17:
98:83:c1:75:16:be:51:ac:80:04:89:7b:a5:c1:89:c2:37:52:
02:33:3b:c2:c0:e0:a8:e3:6c:2f:c9:81:01:a7:c5:41:27:51:
3c:cf:cf:77:39:7e:61:c1:d1:84:8c:6f:ea:d5:5a:a5:4c:d4:
87:1e:22:1b:d2:f3:ec:bc:15:07:a1:a3:c0:74:7a:34:11:b9:
c9:c0:3f:c0:9f:88:b2:e5:84:3d:11:df:1b:db:d1:62:a6:f8:
c3:ff:de:aa:5f:a4:5f:18:83:0a:99:56:5e:a0:28:44:0e:c6:
30:d3:09:bc:03:4a:6e:24:11:29:e9:7a:54:70:a9:a4:71:ce:
33:26:36:13:60:18:c2:e3:b9:a7:a4:a8:82:2e:c7:b6:00:41:
36:51:66:ec:7c:fe:82:69:74:35:65:b7:6e:3d:a7:4a:76:98:
13:bb:1d:73:2e:16:d4:6d:03:25:04:81:dd:b1:45:58:75:47:
2a:d7:ca:c2:7a:6f:85:0f:34:ef:00:2f:f0:df:db:7f:bd:62:
26:82:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:31 2024 by rpki-client on console-fra.rpki-client.org