Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
File: VM1oEInn9JVSuuxWoHax7PJe_gY.cer (raw, json)
Hash identifier: 2kk3f+SPF9W4tT+qliNgV6Rv912Gkw/DXePave6YUcs=
Subject key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 13:21:01 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 18022
AS: 139319
IP: 2404:a5c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 09:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124088 (0x1e4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 15 13:21:01 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:d5:53:cc:9d:37:96:a8:ad:00:34:97:9a:
b6:b5:3d:64:2f:80:45:92:38:eb:f7:87:b4:bb:81:
ef:48:65:94:0c:06:96:2b:54:de:ec:65:ef:9e:ea:
ef:77:01:99:7a:6a:08:9e:94:a2:b7:1a:f2:5f:8c:
ce:48:cc:34:3c:8b:90:97:af:15:8e:65:0f:59:54:
d3:a5:18:48:22:80:0d:db:7b:3d:66:b2:f0:3f:e4:
08:23:64:23:88:ec:08:9a:ad:03:62:26:ee:3a:2d:
c3:59:eb:f5:93:b0:8c:49:3d:ed:a8:8c:83:33:fb:
57:75:29:e2:3a:61:c0:61:53:44:6b:6a:4d:42:6e:
da:f0:1d:3b:7a:31:7d:04:18:2a:ca:63:30:db:97:
f3:ed:0b:2a:bf:d2:2c:dc:3f:5d:32:b9:95:84:10:
3f:5c:0d:ce:2b:dd:fe:bb:1c:3a:7f:78:45:9e:57:
50:25:85:ac:aa:d5:9a:0c:17:bd:f2:0b:e1:bb:d9:
03:6c:5c:f8:f1:41:bd:c4:09:67:d6:6c:5c:46:9b:
5d:f9:ea:8e:6e:7b:36:5d:9b:78:0e:d1:00:1e:79:
1d:51:3c:03:e0:f9:05:11:9b:c4:30:3c:14:07:ba:
41:28:2d:12:5e:45:26:a4:bd:6f:81:3f:64:51:7b:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18022
139319
sbgp-ipAddrBlock: critical
IPv6:
2404:a5c0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:e8:08:e3:ca:8e:37:c2:05:5c:d6:7c:c4:ad:a1:c4:db:88:
a6:2f:52:8c:9d:29:48:9b:33:4d:ff:85:2f:7e:0a:af:2f:f3:
a1:3b:47:29:d8:c8:c5:f3:7e:c2:86:bb:91:f7:e2:22:83:02:
03:46:77:26:48:0a:04:e1:6a:2d:63:01:cf:f4:b5:dc:aa:d3:
22:88:a1:4e:2f:c6:50:3e:1a:87:a9:01:2e:5b:a1:36:c4:d6:
59:dc:96:72:18:85:1e:19:a5:7a:0f:b0:1a:22:1e:b9:fc:52:
83:0c:d6:05:c2:a8:74:ab:e2:98:93:f1:e5:c6:c8:3c:38:32:
52:01:d3:ff:bf:03:21:8d:15:49:48:a6:03:fb:36:26:ac:be:
ed:d1:42:83:4a:3d:2c:5a:3f:c5:2c:7e:61:bf:1e:31:2c:4e:
0a:47:1c:23:6c:43:7c:90:4b:7e:2d:97:d8:1e:f9:b4:8b:24:
a7:80:63:f2:6f:b2:cd:c0:71:99:87:7d:76:ad:1d:6c:d7:65:
60:e5:0c:d4:e3:c1:86:28:ba:2f:0e:2b:b7:db:68:7e:bc:3c:
b4:e8:64:93:12:f6:7a:55:82:6d:11:51:2b:84:93:1a:c6:77:
9e:d6:27:97:fa:c9:34:f2:a6:1a:85:ed:db:31:66:5f:14:63:
6d:bd:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:03:59 2024 by rpki-client on console-ams.rpki-client.org