Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
File: WatjEmbskGVhP9Z3y9tP8TvvZEE.cer (raw, json)
Hash identifier: tUDfTq8dbqhr2WB+JejBR8t8nfm27EDvJz2NZ4OAo2E=
Subject key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020BE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Sep 2024 16:16:30 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 23765 -- 23766
AS: 132802
AS: 133902
AS: 135424
AS: 149302
AS: 151975
AS: 151980
IP: 2407:5880::/29
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134113 (0x20be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Sep 4 16:16:30 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9191010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:bb:f3:e4:1d:0a:b7:80:78:01:1e:fc:fc:
89:5d:07:4b:c9:e8:57:04:e7:5e:f9:4f:83:49:90:
84:00:af:7f:63:b2:dc:c1:ef:81:4d:58:a1:9d:35:
40:62:23:47:e5:cb:d7:f1:04:4d:ed:af:00:7e:f5:
e0:88:c4:09:62:20:f7:d5:ad:f5:3e:ff:9b:9a:b6:
63:92:4c:d5:a3:6f:f3:19:20:15:17:92:00:48:16:
9c:d7:4b:e5:b2:00:85:70:a8:5b:9b:45:eb:de:11:
be:c8:c6:cc:0f:c8:ec:07:37:9c:26:f9:e1:dd:f4:
7d:83:71:12:8f:12:e1:c0:3c:47:13:34:e2:1f:56:
b2:fa:de:01:f1:21:1a:31:de:44:d8:4b:ee:d8:e0:
5a:c6:87:8d:1e:ab:3f:d4:b5:d3:95:5c:2b:92:88:
36:80:01:44:bb:7d:66:47:e6:c2:9d:f8:5c:3d:61:
98:ff:9e:dc:ab:89:62:fc:fa:a6:68:e2:93:ca:6c:
07:2e:59:36:1d:b0:3a:3b:4c:b2:84:2c:b6:5a:fc:
18:f3:65:36:97:19:b0:1a:66:1d:08:2a:c4:b7:09:
96:94:da:62:8d:ff:75:df:41:1d:6a:b5:17:c2:8c:
a5:7c:62:8b:d8:23:40:ee:81:b6:f9:e0:18:b6:ba:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23765-23766
132802
133902
135424
149302
151975
151980
sbgp-ipAddrBlock: critical
IPv6:
2407:5880::/29
Signature Algorithm: sha256WithRSAEncryption
4c:d6:16:b8:3b:97:72:94:2e:32:db:29:59:51:e7:fe:23:c1:
ef:f7:05:3e:2b:70:05:58:2d:51:15:b3:b0:14:b3:79:1a:04:
8b:ff:a5:4a:69:9b:76:23:04:97:bc:84:53:17:3e:25:ea:9a:
80:0c:66:fe:39:03:66:03:37:35:f1:aa:eb:ab:c4:80:f5:7b:
a3:1e:05:da:d9:e1:4f:93:1a:c2:33:79:d0:18:1e:75:05:75:
75:01:6e:07:61:88:b6:88:fb:1c:c9:54:3a:dc:e1:8d:ac:d9:
7c:14:aa:f5:ea:d7:25:c1:02:a1:b0:d8:d7:48:e6:4c:89:7e:
f8:a3:cb:8d:04:fc:30:e5:ee:b8:92:af:8b:06:af:fd:1b:22:
10:cf:a6:ef:87:24:c9:b6:64:92:3f:ee:3d:0f:d0:9e:23:48:
bc:29:a1:cb:27:ce:b1:5d:35:c8:cb:86:8c:96:d6:c8:ca:a9:
00:9f:f2:d3:16:4c:29:4f:71:b1:40:f5:07:6a:85:74:68:d3:
98:58:40:4d:3f:20:35:ec:21:b0:de:4b:88:95:72:09:60:7b:
8a:67:3c:61:31:79:50:eb:27:12:41:62:eb:29:7d:76:5b:95:
6c:b7:59:11:29:fd:b3:69:93:de:ea:1d:3c:9f:90:a8:4d:60:
05:a7:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:48 2025 by rpki-client