Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
File: YEennPxgdi4PMhSxYHc2mnY_65s.cer (raw, json)
Hash identifier: Z/O43OakibErtzkFlRay7oxZ4n7ykAUuqpnd0cIarRA=
Subject key identifier: 60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AC38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Jun 2023 20:39:34 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.114.132.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109624 (0x1ac38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 26 20:39:34 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:51:90:42:a7:e6:7b:bd:01:73:9b:99:36:
b3:89:5e:45:16:ec:6f:7d:de:bd:6f:a3:df:01:43:
34:61:23:57:58:ab:de:3d:36:8e:17:4f:a9:6a:90:
d8:a0:5c:ab:c4:77:c4:43:ca:85:f9:4b:6e:9e:79:
fb:6a:fb:6a:5f:5c:52:b8:bd:a8:3a:0f:19:c2:d1:
be:2f:e6:37:ca:0d:58:e8:f7:e7:41:d6:26:90:e5:
29:bd:91:fd:3f:fb:b5:fa:56:e7:27:45:81:dc:8c:
41:e0:aa:c6:ae:cc:52:e1:20:f9:8b:76:d0:36:c1:
da:e2:16:c9:dd:06:72:b3:24:e0:5c:14:cc:8e:43:
27:59:76:1b:ef:b9:9f:26:60:14:16:54:d6:29:54:
24:3e:73:89:a9:cb:33:ac:97:e8:44:1f:ba:92:14:
9e:ec:2b:e2:e5:e6:e3:63:6d:5c:9d:5d:0d:f2:60:
a1:40:e6:9d:15:5b:f3:32:9a:93:4f:ec:b4:bd:04:
48:f8:ff:c7:e3:44:36:17:68:a4:5d:c2:20:b4:59:
24:fc:25:31:97:4b:a7:42:d5:9d:8a:74:ea:a6:e1:
cc:46:c6:1c:d8:0a:1c:1a:58:e9:0d:6d:13:a6:37:
7c:84:98:bd:9e:10:1d:f8:30:8a:0a:4a:d7:2c:eb:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.132.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8b:e2:8e:31:6b:65:c7:12:31:ae:9f:ef:cc:fa:83:c8:21:
2c:7a:56:05:61:bc:b8:67:c8:1c:3d:2a:1d:bf:46:01:65:0b:
99:36:d4:fc:e8:31:ed:7d:31:af:99:93:10:f3:0e:50:95:c0:
48:cf:ad:4f:3e:a0:37:00:48:f8:ec:16:02:90:02:9d:d8:3c:
7a:96:b6:4a:12:77:60:12:2a:7a:86:fd:d0:85:60:22:1c:14:
89:6a:ea:e1:62:d9:61:ca:9c:59:5e:1d:a4:4e:84:54:f4:0e:
34:9f:21:18:b0:7b:15:c6:98:a1:59:a7:5f:97:eb:37:8d:ae:
b1:0f:7e:14:b8:2c:1b:65:88:c5:e2:2f:87:a1:2e:d6:51:eb:
08:f0:b0:e0:32:47:19:d9:4a:56:c7:4d:4b:5d:3f:66:b2:c0:
c3:cc:7f:4e:b6:2a:aa:05:06:11:01:b6:96:d3:7c:38:74:72:
9f:be:c9:90:32:21:8e:c2:19:8e:b1:22:ed:12:7d:7f:ae:25:
ec:76:f6:62:bb:16:3b:18:c1:79:86:5b:05:74:60:34:01:f7:
3b:46:f2:90:d8:ed:57:18:d8:e4:9c:64:a9:0f:14:e5:5a:7c:
9e:13:7f:93:f9:e3:7f:68:37:d5:37:86:11:19:49:d5:56:d6:
06:1c:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:25 2024 by rpki-client on console-ams.rpki-client.org