Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
File: _x_VyU8S81-tE63yeZqJj94Gysk.cer (raw, json)
Hash identifier: M7w0wNrJsp/jU8UWZwSKi10LplO/X4uqZdyZJHCtJL8=
Subject key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FAA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 23 Jun 2024 21:44:12 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 103.36.12.0/23
IP: 2402:ec00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129698 (0x1faa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 23 21:44:12 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:7f:81:a8:10:92:e1:80:0a:df:eb:05:95:
c3:bb:f6:b5:f3:98:ff:94:3c:39:e3:6b:ba:12:db:
fa:27:80:3f:97:01:ea:33:06:57:b5:86:3d:08:55:
f6:07:ef:40:a8:6a:cb:b4:71:36:cd:b7:d4:c3:ba:
1d:7a:e3:0e:10:6b:31:60:41:e9:61:0d:9a:08:a8:
6b:6f:ae:45:01:17:85:57:51:6b:02:f8:88:02:11:
ac:bb:aa:16:4c:3e:ed:2e:20:b0:81:86:d0:25:05:
df:44:e7:08:7e:82:32:ba:f4:e6:7b:de:6c:96:a9:
0f:85:66:c4:46:cd:9f:29:ca:a2:a4:d7:cb:b8:4a:
6d:41:6b:40:0c:9b:ba:d6:aa:32:35:dc:29:ba:5c:
79:74:a5:6c:80:17:95:c6:f1:ed:84:3c:89:3b:2a:
d4:fb:c3:64:99:64:32:fd:ab:f5:77:61:fa:27:ef:
98:be:a6:1a:00:ce:8c:4b:43:81:fa:4e:84:df:0a:
21:3f:3b:c8:4d:e9:8b:68:e6:3b:4d:37:bb:cb:60:
c4:67:10:d9:fa:dc:e3:b4:6b:c6:c6:e4:26:e2:ae:
ea:d3:23:7f:f6:de:bf:73:f1:f2:66:fa:e4:f0:4b:
36:00:4f:12:f8:89:ba:8c:98:62:f5:7c:86:db:2a:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.12.0/23
IPv6:
2402:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
59:db:77:14:64:14:55:b0:2e:dc:cc:b5:ae:4f:98:9a:a5:51:
2f:18:96:e8:6b:7b:7c:d8:e3:8d:c2:95:43:e6:f2:9d:a5:a3:
2b:a6:7a:1a:93:36:9a:a0:d9:5f:e1:16:2f:74:ce:b4:84:92:
8d:b3:34:80:bc:df:05:9e:03:70:cc:73:27:d9:79:a0:8f:c8:
69:a6:f3:15:48:02:6a:a8:a2:86:12:8c:dd:31:d8:45:99:05:
61:b6:39:13:20:32:e6:48:42:89:d6:14:5e:54:69:f4:67:9d:
d3:d4:d3:22:0d:23:88:7b:ad:d5:50:c2:88:b0:27:4a:a8:87:
fc:2d:7c:03:40:cb:a9:b3:c8:9e:31:90:d3:b0:bb:e7:6d:96:
b1:46:f8:49:21:92:c2:af:d6:f8:5b:ef:a5:ca:81:f0:ea:0f:
aa:70:66:b9:d8:b7:81:9a:2b:5e:cb:9e:e9:b2:a6:02:d3:90:
b1:d5:b6:8c:f1:30:56:58:ff:d2:57:a7:38:7f:66:0f:6e:7f:
8f:70:68:0a:84:35:eb:8f:e0:d0:2f:a5:62:0d:b3:05:c6:dd:
f0:ff:47:95:8b:51:b3:45:3f:5e:cb:ef:a0:df:7d:21:a8:e6:
5e:19:c5:ab:d4:7e:50:2c:b7:ef:28:9e:71:57:2d:6f:cf:1d:
09:5c:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:53 2024 by rpki-client on console-ams.rpki-client.org