Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
File: YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer (raw, json)
Hash identifier: s3fspKXJHpYHE9UM8kSgDQeUvV+/9UtYvzN8Rw3nBfE=
Subject key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E1C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 03:05:57 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.180.114.0/23
IP: 2400:52e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123332 (0x1e1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 03:05:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:39:b5:d1:1e:97:86:eb:9a:55:99:7b:7e:
c1:62:ee:39:71:73:67:72:de:d5:0d:11:51:a6:7b:
6d:21:1b:22:d3:01:57:64:b4:0f:d0:74:8f:22:eb:
80:1e:a1:23:e8:3d:ca:15:66:82:05:1b:b3:5b:77:
21:a9:fd:22:1c:89:b7:02:3b:07:c0:26:30:13:d1:
e6:73:85:48:2f:3c:29:96:7b:8e:04:90:9f:9a:31:
ec:c2:95:60:16:e2:c2:75:35:c4:74:fe:e6:b0:8d:
59:d0:56:e3:71:51:3b:b1:23:89:35:1f:ad:41:66:
5e:d7:d4:63:93:a6:92:9f:97:c0:1a:54:9d:d4:73:
3e:6a:65:fa:a8:57:aa:af:19:8a:ca:db:6c:f1:1c:
4d:96:b3:be:71:18:25:6a:7a:22:bd:cb:dd:14:8b:
89:b1:50:cd:3c:3a:34:42:21:f5:84:57:aa:7a:29:
35:27:ab:bc:6a:72:d3:5c:a9:d2:8b:b0:b1:6d:64:
b6:f9:d5:96:2c:33:00:3b:30:b1:61:d8:3e:fd:0c:
59:13:79:7a:c1:17:54:87:d6:d3:7a:6b:cd:51:ab:
6f:30:a7:2a:8f:af:31:b0:c4:04:33:fa:83:c4:61:
97:1a:fb:b6:38:c1:20:6d:16:3f:d7:0a:db:b1:5b:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.114.0/23
IPv6:
2400:52e0::/32
Signature Algorithm: sha256WithRSAEncryption
ca:14:b6:f3:42:85:65:1d:3a:71:e1:5a:f8:2f:c9:70:c5:5b:
26:2d:9d:17:ae:c4:97:e0:0b:c5:eb:60:84:fb:f1:e6:bf:4e:
73:ca:e8:fe:40:ee:0f:70:7b:42:99:0f:4a:40:c8:c7:da:b3:
46:91:ef:02:5c:18:5a:1b:62:d9:31:7c:ec:04:d8:b6:00:e9:
d2:97:e3:21:c6:bb:4f:7e:f2:4a:fd:bd:56:b4:2f:59:14:d8:
c8:01:3c:b2:a8:34:a0:28:87:87:1c:bd:16:8b:04:3e:f1:2f:
c4:ad:66:34:41:8e:5a:be:1c:bf:51:49:83:c1:bc:54:72:32:
9c:25:5a:a2:4f:6c:9b:3b:cd:f6:2b:a3:e8:96:93:8a:96:86:
d3:af:42:b7:33:8a:ca:65:21:00:1c:a0:ef:be:26:a3:28:f2:
18:9f:19:36:05:52:e7:f8:7f:5a:4d:c6:15:5c:c9:c4:4e:6f:
8a:de:38:a6:96:14:d4:84:6c:58:7f:1c:1c:70:8f:16:ac:1d:
d1:1a:ad:12:78:9e:61:69:3d:b6:65:5c:93:4c:77:7f:67:fb:
76:10:e5:38:25:4e:78:0b:50:59:f8:a0:96:21:45:1c:09:cb:
df:1c:4a:ca:b9:64:66:01:ec:a5:49:d9:37:13:8e:7d:83:59:
77:64:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:30:27 2024 by rpki-client on console-fra.rpki-client.org