Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer
File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer (raw, json)
Hash identifier: zDLF/pU0iinvyT6EfIY1dfjGXXcAt9S9QMf+ktu5YmU=
Subject key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 Mar 2024 14:43:34 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 202.7.8.0/21
IP: 203.5.121.0/24
IP: 2406:6c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 19:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124153 (0x1e4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 18 14:43:34 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:98:3b:ef:0d:55:a2:40:a9:f2:7e:e3:29:
8a:dd:6a:85:68:b4:4f:02:01:20:33:b4:23:8d:c2:
5b:54:ce:70:6b:ae:25:a3:0d:2d:5a:ed:2f:d2:f2:
b9:f4:5d:65:64:06:3c:d3:96:b5:8b:d6:38:6d:c9:
db:ca:34:c5:b1:c4:9b:3d:6a:fc:1e:4b:27:45:75:
26:bc:c7:9c:b7:a3:18:18:c4:38:b3:f4:3c:44:c5:
2c:1c:08:21:2a:ef:a1:c3:1e:15:73:9b:2b:2a:a5:
61:83:fa:71:e4:ef:d9:39:d4:8d:0d:8a:fb:a9:8f:
cf:89:01:17:5e:a4:88:3e:87:74:0b:28:7f:a3:ed:
9e:be:32:8b:ad:c5:a6:c0:50:bc:89:de:82:9a:28:
01:1c:0a:53:13:d6:a9:b2:95:e1:fb:a0:ff:99:ff:
16:d3:f0:9e:fe:24:07:ab:ab:b8:62:48:c0:ed:0d:
43:8e:a2:3d:e9:c0:d5:42:6f:0f:53:14:18:ba:79:
7b:ac:bb:c5:81:25:56:29:28:ac:54:71:3e:4a:8c:
07:de:48:a1:da:18:82:65:a2:ab:42:7d:85:26:1a:
ea:28:f6:08:64:6b:fc:9a:dc:61:0a:ef:b2:c0:5f:
ed:a4:ad:3c:e3:d7:04:35:1d:39:13:c1:a9:f5:1f:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.7.8.0/21
203.5.121.0/24
IPv6:
2406:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c0:b1:6b:f1:5d:6c:29:34:fe:c2:bf:b2:80:97:db:d4:50:
35:75:46:4a:d9:75:de:77:80:dd:e9:66:03:0b:4d:d1:fd:21:
99:01:73:34:1c:a6:da:6d:af:11:ef:57:82:a9:80:e8:17:7a:
06:83:ec:4d:f1:e1:a5:91:8b:03:e9:c3:90:aa:87:e6:5b:f3:
49:c2:09:86:be:7d:ef:49:80:2b:7c:e7:50:b2:be:e9:96:64:
7f:cb:5a:67:de:56:92:2e:4d:1f:00:81:23:7f:4d:8d:2a:31:
8f:3a:90:81:39:e0:00:6a:95:41:e5:70:17:be:62:22:79:8c:
7f:3b:c7:dc:bc:e0:fb:fe:2c:e8:21:ce:1d:7c:09:26:af:ed:
39:65:2d:51:49:c7:1e:3e:9f:13:4b:21:3a:8d:c0:1d:b5:15:
78:be:5c:44:30:ca:c1:9e:d7:69:3d:56:5d:fc:46:7e:c6:1f:
9e:21:c3:f2:a9:6b:34:f4:53:97:9f:02:cf:ce:10:57:6d:b8:
7b:fb:64:65:33:f8:83:32:f4:4d:a8:a0:d1:67:8f:b9:83:b4:
46:92:ab:b3:e8:e8:8c:87:87:32:9c:50:18:a6:99:bf:b2:2a:
87:95:a2:2e:59:84:05:06:69:4b:a3:e6:87:ab:80:a3:18:63:
a1:f3:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:35:14 2024 by rpki-client on console-ams.rpki-client.org