Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.cer (raw, json)
Hash identifier: xLkWRzEJnadgSaczZhn12Tj30cobykyXm5WyHsSwk34=
Subject key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020592
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 Aug 2024 05:52:42 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 18220
AS: 24227
AS: 24230
AS: 45870
AS: 147172
AS: 149861
IP: 202.12.69.0/24
IP: 203.0.68.0/22
IP: 203.5.216.0/23
IP: 203.5.220.0 -- 203.5.243.255
IP: 203.6.0.0/17
IP: 203.10.112.0/21
IP: 203.10.128.0 -- 203.11.63.255
IP: 203.27.103.0/24
IP: 2401:6000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132498 (0x20592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 05:52:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:f6:36:07:78:06:34:de:42:8c:34:aa:20:
85:1a:cb:02:67:07:24:d5:3b:7a:db:06:87:c3:da:
c8:5a:12:00:e2:ec:ad:cf:4e:ad:2d:13:d8:13:15:
f7:82:c2:b5:86:ed:31:20:cb:0b:69:0f:03:0d:e4:
bc:28:74:a3:c6:0e:6b:d8:93:fc:c7:25:0d:66:59:
26:52:39:8b:56:3a:89:3c:1b:51:67:c4:55:ad:92:
57:4b:48:56:de:b9:ee:90:03:6a:97:f1:2d:ce:cc:
3c:a5:48:cf:23:3e:e6:5a:e6:66:a0:d4:5d:9c:0a:
50:43:48:9f:2a:84:43:12:f4:96:37:ba:91:87:61:
11:51:d0:62:db:a3:6a:09:11:a3:1b:3c:7d:06:1e:
1d:05:19:4d:07:a8:50:9f:5e:d7:90:32:79:c8:02:
91:7c:c3:b9:7a:93:00:42:5f:87:01:c1:4e:f3:88:
e1:2c:7a:75:54:fc:c0:50:03:a7:ec:74:39:ba:a9:
51:32:a6:3a:15:f7:9f:7a:97:52:ac:bd:27:31:b6:
cc:53:99:a2:3d:a2:f0:b3:fd:59:e0:01:e3:fc:5f:
ce:68:3e:a3:ee:d9:4c:9a:0c:9d:92:f8:aa:d0:a6:
d4:81:86:60:35:0c:9c:2f:e9:b2:e5:af:c0:ad:c5:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18220
24227
24230
45870
147172
149861
sbgp-ipAddrBlock: critical
IPv4:
202.12.69.0/24
203.0.68.0/22
203.5.216.0/23
203.5.220.0-203.5.243.255
203.6.0.0/17
203.10.112.0/21
203.10.128.0-203.11.63.255
203.27.103.0/24
IPv6:
2401:6000::/20
Signature Algorithm: sha256WithRSAEncryption
34:8e:46:c4:e5:ea:6c:89:f4:e9:21:6d:c4:3c:b5:58:de:e5:
06:52:0f:5c:50:5c:ee:5b:eb:f9:5f:73:60:ef:72:7b:f9:e6:
0d:cb:ac:5a:2f:d4:49:3e:59:02:b1:30:1c:3f:3f:bc:5a:c9:
7c:d5:46:39:a8:23:64:ce:b1:e2:5b:76:8d:ab:c9:03:ad:54:
bb:cc:af:6b:99:f9:0e:51:f7:1f:13:dd:c5:94:43:89:48:f6:
e9:00:08:5e:45:ab:4c:7b:64:df:40:75:f2:69:dc:44:56:62:
9c:ea:ee:05:82:8d:d8:1e:15:ac:90:78:68:4a:5b:b1:a6:2a:
b6:85:69:70:19:f0:3e:0d:53:2b:00:de:b3:75:8a:97:7f:01:
ee:61:33:ed:54:b2:4d:82:19:83:60:05:e7:54:c6:63:ef:5f:
06:32:a4:f6:24:65:67:fe:ee:63:54:e7:74:d6:90:26:fd:cf:
27:d7:8d:df:e5:4e:8c:90:1c:50:2f:77:b9:07:8b:d7:ce:a3:
15:82:58:01:c0:ed:64:20:b8:5e:34:37:94:a3:15:a2:7e:1c:
cd:fa:08:eb:6d:c4:de:83:30:5a:3f:ce:46:8a:22:bb:a9:02:
ed:85:f4:90:09:88:b5:bb:8f:e1:ad:e9:7d:42:c2:00:ea:ef:
74:7a:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:57 2024 by rpki-client on console-ams.rpki-client.org