Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
File: _Ern2eP0GafSBKVMedHz76mn1sg.cer (raw, json)
Hash identifier: dTWsvjPhJWXUvhY+D3IY+2M4TnOzw/hF0xSqYvp9snE=
Subject key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Nov 2023 05:14:43 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 58.84.28.0/22
IP: 103.197.44.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 05:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118159 (0x1cd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 29 05:14:43 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:45:6f:e2:d8:12:d2:a6:e9:50:57:75:01:
14:91:82:6e:de:ce:7d:ef:bd:a1:8d:5c:01:5c:ea:
92:cd:93:c8:ad:c8:66:58:51:39:a8:af:b0:cb:1b:
29:33:02:21:d3:15:32:e5:cc:75:6e:bf:dd:19:47:
33:0c:4d:7d:4d:c2:d6:db:2e:7b:09:6b:3d:50:c1:
18:77:27:98:96:6e:a7:61:10:e7:58:1a:88:67:91:
5e:79:cc:96:9f:37:6a:9b:75:8f:ba:0b:2d:38:95:
9b:28:a0:f9:d2:b2:e3:0c:39:dd:d0:cf:cf:bd:d2:
64:cf:2b:09:7c:25:5f:6b:2e:da:0e:e6:9a:83:95:
2f:a2:d8:65:22:7f:eb:a4:37:ae:0d:72:67:17:55:
36:ca:4e:18:19:61:ac:cb:c4:d3:97:12:3e:23:15:
2d:eb:ea:f5:55:26:4e:d5:0e:c6:2c:fa:e5:da:75:
49:67:cd:1d:13:d6:1d:7d:a7:34:78:41:c3:c9:90:
1f:51:aa:42:d9:55:32:67:12:b0:53:a7:ed:93:96:
07:f2:eb:91:33:a6:34:d1:54:45:98:8a:e6:dc:43:
06:dd:9a:6a:16:fe:ea:9f:a7:f6:fc:db:aa:53:84:
fa:b6:33:45:81:35:20:61:2b:f7:6c:4f:43:44:37:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.28.0/22
103.197.44.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a9:8d:be:84:d7:46:92:55:2d:83:b1:3f:5c:e7:4e:60:10:
83:ab:11:51:46:21:50:12:11:ad:1d:f7:83:f8:1c:bc:81:14:
27:09:a3:c1:6d:56:a7:9a:1c:0b:4a:e3:3d:63:05:a4:6e:c2:
46:13:ca:43:8c:e2:7e:ae:9e:63:a4:ec:70:ce:5b:63:1d:4e:
69:2f:2f:43:d3:d5:96:a6:e0:0c:5d:44:0e:06:3f:7b:83:73:
39:75:3f:26:4d:0e:83:55:cc:2b:79:9d:f7:1e:fe:3f:f6:87:
9d:44:56:28:88:00:d5:69:2b:26:9e:c2:d2:ab:b1:ea:ac:83:
84:4b:a7:cc:62:99:df:0b:84:79:66:0f:60:e3:ea:37:30:81:
e3:7a:f0:42:34:d1:e4:b7:4f:ea:2f:06:fd:1f:bd:f9:ec:b7:
2a:12:e3:b3:f1:ed:10:9e:ee:bd:da:17:ef:46:72:63:c8:39:
09:c1:9f:22:a0:6f:66:d3:39:58:14:c6:80:3e:b0:38:53:a3:
b0:d3:60:96:94:d9:fc:6d:10:d2:64:44:48:01:2e:c2:4f:10:
c0:ab:88:53:08:26:92:bb:3d:4c:05:8f:f4:33:eb:e3:b0:83:
37:ac:24:53:16:48:18:3d:58:34:59:bd:b8:5a:d1:30:7c:6a:
83:f6:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:45:23 2024 by rpki-client on console-fra.rpki-client.org