Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
File: UyQGWmE9LRB4F5xiFjcczGp3UHo.cer (raw, json)
Hash identifier: +dV9NSBvYz7BnVrnygbfcM5hqfcIVWLNuzzJvnWr/hg=
Subject key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E538
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Mar 2024 05:26:49 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 43.247.60.0/22
IP: 103.3.240.0/22
IP: 202.123.128.0/19
IP: 2401:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124216 (0x1e538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 05:26:49 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9a:ca:26:13:10:a6:04:cb:75:c8:4a:cd:
40:25:56:18:fd:6f:17:af:cb:1c:52:4b:e6:7c:4c:
90:2d:70:33:bd:c2:0c:de:c3:cf:01:3e:2d:47:f1:
9c:29:21:0d:8c:aa:33:dc:50:e5:4c:bb:22:fd:15:
66:eb:82:85:f9:5b:a7:b6:6a:a9:87:99:16:f6:d4:
74:95:0b:ec:cf:22:53:8d:b5:45:54:ea:a0:7b:50:
f6:41:13:cc:ea:4f:4e:e6:54:25:e0:78:a2:4a:f9:
7a:f6:a5:b1:6f:82:37:0b:2a:84:64:60:9c:f1:0f:
4f:4b:4f:b6:a6:0b:1a:fb:3a:5a:3f:06:9a:0b:cf:
aa:3b:26:e8:ff:29:10:00:cd:e9:43:b4:13:da:e2:
db:4e:ec:05:f8:f2:e8:00:f7:46:cc:5c:7c:55:29:
f6:9c:79:f5:c1:d9:bc:67:49:5c:f9:11:1e:79:5b:
39:d5:c1:71:84:35:58:93:a5:bd:de:82:bf:ce:05:
a3:e4:0b:1f:6f:6b:9c:7b:a7:dc:12:81:d0:e3:7a:
7f:33:93:ea:3b:bc:d2:97:e5:d8:19:7a:6f:2d:5a:
b9:c7:60:6c:2a:51:b4:9d:d5:23:e3:7a:5f:4a:fc:
3c:09:c0:64:4c:b3:8d:b6:02:7f:77:e7:f9:91:83:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.60.0/22
103.3.240.0/22
202.123.128.0/19
IPv6:
2401:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
c4:4b:12:b5:4a:47:05:ff:db:09:2e:b8:ad:2d:a3:59:0d:bf:
92:d9:50:66:1d:74:61:7f:6f:21:76:1c:58:9c:50:b6:4c:ec:
94:96:6d:97:8d:e1:5a:1c:31:07:fc:84:41:e2:cc:a8:c0:e1:
f2:9e:38:36:a1:ad:e4:1f:aa:79:ad:0a:5c:ad:d6:83:2e:b0:
d4:90:ef:2d:c3:30:b4:d5:f3:7b:79:8d:2f:5d:71:2b:64:75:
26:95:25:02:bd:f2:63:c3:d5:cf:85:5b:da:3b:e4:11:8e:f9:
85:d5:03:4c:dc:bd:c4:d7:f3:29:86:30:b0:95:1f:b8:b0:64:
a9:1b:07:36:dd:23:ad:75:07:e9:a6:b9:c7:eb:14:85:b1:24:
ea:ee:92:11:96:e9:86:0d:7c:4b:7c:2b:45:28:7f:f2:62:23:
a9:fc:10:71:45:89:71:87:da:2c:e9:fb:67:5f:7d:13:e0:43:
89:90:5d:fc:d0:33:e2:40:38:f0:98:e5:c9:fd:2b:e1:96:19:
6c:33:f7:97:6d:7c:8d:58:e6:58:a4:37:d7:46:bd:94:5e:80:
45:c5:1a:2e:72:bd:0c:b2:af:10:d8:d0:ea:d0:4c:57:9c:cb:
1a:e8:d1:45:ba:0c:f6:33:f4:99:7e:d4:5b:f9:00:71:cb:e5:
a7:c8:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:18:29 2024 by rpki-client on console-ams.rpki-client.org