Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
File: _Ern2eP0GafSBKVMedHz76mn1sg.cer (raw, json)
Hash identifier: PVOwIZS3kFiTjospjxL73EtIflvOyJZtOlOa63jUPSM=
Subject key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0217CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Nov 2024 14:04:46 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 58.84.28.0/22
IP: 103.197.44.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137162 (0x217ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 14:04:46 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:45:6f:e2:d8:12:d2:a6:e9:50:57:75:01:
14:91:82:6e:de:ce:7d:ef:bd:a1:8d:5c:01:5c:ea:
92:cd:93:c8:ad:c8:66:58:51:39:a8:af:b0:cb:1b:
29:33:02:21:d3:15:32:e5:cc:75:6e:bf:dd:19:47:
33:0c:4d:7d:4d:c2:d6:db:2e:7b:09:6b:3d:50:c1:
18:77:27:98:96:6e:a7:61:10:e7:58:1a:88:67:91:
5e:79:cc:96:9f:37:6a:9b:75:8f:ba:0b:2d:38:95:
9b:28:a0:f9:d2:b2:e3:0c:39:dd:d0:cf:cf:bd:d2:
64:cf:2b:09:7c:25:5f:6b:2e:da:0e:e6:9a:83:95:
2f:a2:d8:65:22:7f:eb:a4:37:ae:0d:72:67:17:55:
36:ca:4e:18:19:61:ac:cb:c4:d3:97:12:3e:23:15:
2d:eb:ea:f5:55:26:4e:d5:0e:c6:2c:fa:e5:da:75:
49:67:cd:1d:13:d6:1d:7d:a7:34:78:41:c3:c9:90:
1f:51:aa:42:d9:55:32:67:12:b0:53:a7:ed:93:96:
07:f2:eb:91:33:a6:34:d1:54:45:98:8a:e6:dc:43:
06:dd:9a:6a:16:fe:ea:9f:a7:f6:fc:db:aa:53:84:
fa:b6:33:45:81:35:20:61:2b:f7:6c:4f:43:44:37:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.28.0/22
103.197.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:fb:7d:01:68:36:10:08:4d:e5:70:8f:a6:cc:dd:0c:c0:1a:
46:1e:bc:99:97:19:e6:2a:af:59:98:83:f1:b8:7c:4b:9e:32:
0d:7d:8c:9d:c2:cd:b4:04:da:6e:69:d5:30:07:5c:91:65:e1:
98:fa:95:77:12:92:38:ef:cf:0b:b5:bd:be:e6:3f:24:d7:0f:
54:8b:a7:5f:e6:d4:ca:c4:63:24:91:ad:f5:6b:06:f3:ca:46:
79:e5:ed:28:1c:4e:35:e9:4a:fd:d6:5d:ec:14:79:96:05:e0:
e1:7a:5d:3b:05:7f:2c:d6:c2:de:f8:38:88:81:10:a1:2f:b3:
3c:b3:d6:fb:10:d0:ad:a2:b9:e4:7e:68:68:62:a0:79:3f:91:
cb:ff:89:13:96:e1:cc:7a:34:cb:01:1d:94:26:e9:94:bc:c3:
13:67:76:38:53:d5:9a:9f:0b:7f:8b:61:87:31:01:d3:4e:f3:
41:1e:bb:1a:62:78:41:3b:65:6f:3f:4a:1d:d8:a4:f2:b5:ec:
f4:35:de:64:80:cc:45:c5:ff:fe:d3:17:5f:24:35:c8:a7:b3:
96:d9:a6:f2:b4:e3:f9:cf:00:66:b6:3e:81:7c:ff:45:b8:b6:
02:76:8f:1f:3d:8b:45:39:a2:c9:03:10:40:ab:4c:8e:f8:35:
3d:06:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:55 2024 by rpki-client on console-fra.rpki-client.org