Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
File: WFcZh2wfmiD9644Ew9aTelrKpXw.cer (raw, json)
Hash identifier: IFn0Ptoe2JhghbVGMlGHMOfPcvIBTAJM77ZpYelYV+c=
Subject key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020EA0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Sep 2024 15:08:32 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 45893
IP: 203.161.176.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134816 (0x20ea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 20 15:08:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:f9:82:b7:c5:fc:d6:35:aa:88:ac:da:9b:
45:4a:48:cf:db:9c:78:a0:e7:f8:ee:80:08:8e:73:
99:8c:bf:63:33:c2:72:02:40:08:61:23:2f:34:44:
d7:32:9f:e1:3a:3a:64:6a:2e:5b:f6:5b:6b:48:69:
c7:08:21:23:00:84:1e:18:cb:72:db:b2:fb:17:b7:
98:5e:79:ac:78:93:97:80:4c:5e:94:61:be:49:90:
f8:0f:46:e6:8f:87:a1:56:36:93:b9:90:01:f1:e8:
2d:a6:99:2c:a0:4c:d1:90:f2:a4:a5:4a:c5:92:71:
ab:b2:87:df:6e:8d:bd:21:23:b7:75:dd:40:f6:b9:
1a:f9:2b:90:fe:f1:25:41:b3:e8:c9:e3:e0:e7:03:
a7:63:fa:e8:d4:f2:3f:4b:7e:a3:4b:92:42:cf:c3:
a2:8a:ef:fb:f0:32:36:1d:d2:96:5b:19:5a:31:4c:
69:75:81:28:6f:3c:86:2e:78:58:44:22:0f:69:4f:
03:db:11:03:fb:ad:4d:a1:26:03:eb:38:07:15:79:
97:be:85:a1:f8:39:39:ff:1d:48:65:49:31:47:17:
cc:bc:f3:87:78:fb:49:41:50:e7:1a:e0:6f:97:d3:
c6:6f:cb:03:cc:06:cf:76:e5:4a:2e:c2:e7:23:32:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45893
sbgp-ipAddrBlock: critical
IPv4:
203.161.176.0/23
Signature Algorithm: sha256WithRSAEncryption
21:80:0f:f0:80:82:9e:56:12:1e:3c:fb:c4:e1:1e:78:90:0d:
95:ba:a8:f0:6f:e9:e1:76:b9:59:2a:4e:5f:ad:24:e5:63:45:
29:cf:df:1d:5d:f9:dd:4a:1b:a1:3e:24:8b:0f:a6:a4:ed:f9:
1f:89:c7:b8:c5:44:91:bb:58:06:91:67:f8:d6:29:d9:ac:1f:
1a:25:f3:bf:51:e7:89:7c:88:fc:04:89:aa:23:50:21:86:0c:
b7:f6:64:8d:ea:55:d3:58:0a:5f:02:29:95:ad:9b:36:fb:a5:
93:96:f7:1c:3c:24:13:c9:03:13:10:44:5c:bb:c3:c6:0d:8c:
02:15:28:30:f7:61:dd:6e:00:6a:df:e1:7b:a4:34:13:ce:cd:
d7:ef:a8:43:52:f8:e4:db:21:6b:45:0a:d2:59:06:dd:6f:b9:
0f:0f:fc:18:a2:44:c4:29:4a:7d:8a:7a:e8:28:b5:2f:ce:3e:
cc:68:c8:8c:f1:a9:8d:36:f4:80:ec:3f:79:64:75:1d:27:e8:
28:7e:bd:04:b8:60:00:14:ba:89:23:db:ba:4a:f4:2d:20:92:
16:ce:37:93:76:30:5f:3b:ca:d7:71:8e:14:3a:02:c2:d0:1a:
98:ed:f9:fd:0f:d6:5b:2d:95:18:82:c0:0b:e1:b8:34:1a:57:
01:95:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:05:09 2024 by rpki-client on console-ams.rpki-client.org