Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer (raw, json)
Hash identifier: Paldczb7RtasFBrKTiy2hTSVY4NlxPt/yBTCfTR7XtI=
Subject key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Apr 2024 14:07:12 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152148
IP: 36.50.72.0/23
IP: 2001:df3:42c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 23:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125892 (0x1ebc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 16 14:07:12 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:fa:5b:8a:33:38:1e:23:ce:ae:6e:89:73:
ce:f5:6d:d6:9f:3c:b5:42:53:26:b8:f5:5d:70:aa:
e1:6d:a2:8f:d9:46:0b:ad:b4:5e:15:77:c6:ec:05:
9f:52:4b:d0:81:6f:f9:c2:04:b3:a5:5d:d8:e8:d5:
08:ae:cf:14:e5:ec:be:e9:0c:fa:b6:5a:9a:ac:20:
d4:62:25:dd:97:ae:15:cc:51:e3:76:29:2f:6b:57:
ac:03:9e:c6:f6:03:77:4f:3c:d8:b1:3d:25:96:58:
6e:06:26:14:5b:1f:e1:77:14:07:68:4c:f0:91:c9:
46:dd:c2:f0:86:8b:56:cd:f0:dd:ef:1d:55:14:99:
b6:59:14:1b:ca:cf:94:61:17:44:26:7d:d5:77:5c:
b0:71:8e:04:5e:93:f6:fa:27:a3:24:bd:01:e7:9f:
84:27:20:b5:fa:21:46:a5:e9:e5:cf:06:b8:05:54:
60:06:a4:84:18:41:bd:66:0e:2d:42:18:f8:fd:54:
9d:ce:dd:c4:de:34:72:66:b6:b2:8b:79:4d:7c:f6:
eb:58:a1:a0:0b:57:6f:70:6d:2a:ea:31:f5:ed:36:
87:d0:d8:12:2d:a0:9a:fb:72:ac:d3:b3:11:f6:19:
b0:88:8d:2e:8e:2e:32:a5:e8:f2:3f:4b:a9:9a:4a:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152148
sbgp-ipAddrBlock: critical
IPv4:
36.50.72.0/23
IPv6:
2001:df3:42c0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:59:65:19:15:d0:ed:d8:4d:1e:2c:93:ef:5f:da:bc:23:a2:
6d:55:a6:d8:39:80:d2:7c:b3:ec:e8:9a:35:a6:fd:65:ca:b3:
a4:0f:e5:d2:8d:8c:c3:f0:20:1d:23:7b:15:df:bf:44:6a:57:
33:60:07:63:18:8b:24:95:79:2a:05:c6:93:3b:49:9e:27:cb:
fb:21:32:ab:4c:3f:d1:0f:df:54:bf:50:29:f6:7d:32:d3:f2:
09:e0:a0:80:73:96:33:46:47:0e:ac:86:11:94:73:db:52:9a:
5e:55:6c:d8:8c:24:5d:1b:0e:2f:c3:20:b6:b6:86:64:c0:4a:
9b:b2:4b:61:f4:e3:a7:d7:80:53:e5:51:02:3d:47:29:6a:7a:
e4:d9:75:9c:52:88:e2:90:31:ce:60:bf:4d:d3:f5:c8:7f:2c:
50:72:0c:4b:e6:14:07:1a:31:25:60:03:46:87:78:49:5c:af:
f9:47:fb:2e:14:2d:d4:e9:14:80:5e:82:88:7a:a3:cc:ab:e5:
75:d1:ca:83:19:79:34:e0:3f:11:02:e4:7d:9a:c1:7f:b6:82:
25:25:6c:5d:9b:a3:ef:14:cf:cf:71:20:cc:96:80:37:63:14:
ca:b9:a8:a2:9c:fb:4e:87:d9:4f:85:4c:20:90:74:39:37:5d:
da:13:3f:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 00:11:01 2024 by rpki-client on console-ams.rpki-client.org