Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
File: cXLtDPRHBezrGWHROgV-z_MHyG8.cer (raw, json)
Hash identifier: /q+smTnIN0VLMAzafz3O35H3AhmLefOT9aNDVwyWEAs=
Subject key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 06:35:41 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 142294
IP: 2001:df4:6c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137784 (0x21a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 06:35:41 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:58:3a:8c:21:04:af:f0:7c:4c:f6:b7:20:
78:9c:41:fe:ec:ec:2c:fd:a7:80:07:4c:c0:dd:fa:
7c:c3:5b:d8:ce:94:e0:90:e3:b0:e0:e1:47:dd:f2:
64:fa:6f:89:99:39:db:42:40:ed:65:e5:00:d6:cc:
c2:21:77:6b:72:74:d0:2a:9d:49:23:93:a0:cc:59:
43:56:d3:f9:28:01:e6:2d:30:9a:b3:bc:19:41:12:
c9:df:06:05:12:c1:a3:14:76:4e:25:6f:22:c3:ed:
9f:86:1a:43:8b:41:5d:af:73:e4:e7:8b:99:53:9e:
1d:0d:41:e1:97:cc:eb:27:88:b8:c0:7c:2b:a2:18:
95:a6:aa:be:61:d3:cf:8e:ec:90:c0:ae:a4:67:c7:
56:81:11:84:6a:07:e9:ea:44:d0:47:5d:97:1c:87:
d2:1b:8c:38:a2:05:92:1a:7d:a8:e4:22:78:94:fc:
4c:fd:db:71:62:b5:50:47:6f:c1:90:0e:55:e5:3b:
61:b3:12:37:6c:68:93:71:f5:7b:77:11:3b:5d:18:
d2:d7:3b:2c:1c:65:43:db:d5:f1:08:ca:bd:cc:ec:
40:81:bd:c2:19:c2:da:33:e2:1f:21:cc:75:cc:5e:
c7:e7:8b:78:82:11:4c:12:56:c7:97:2c:6a:dd:e1:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142294
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6c40::/48
Signature Algorithm: sha256WithRSAEncryption
40:0d:76:19:fd:c0:c6:3b:b1:ae:b6:4f:9f:f7:45:4f:73:14:
29:e4:03:77:18:53:b2:85:26:b5:02:4b:5a:31:05:8d:7a:92:
6f:8e:1c:8c:7e:07:2d:37:fc:83:dc:35:1d:a0:72:5c:ed:3c:
08:21:a7:d6:6d:97:4c:32:04:ba:83:81:42:eb:ca:bf:3b:9a:
0e:1e:bb:19:ef:ed:25:45:be:d1:36:e8:f2:0f:7c:f5:63:9d:
83:8c:c3:9b:17:bb:0f:1b:8d:76:55:01:52:ca:57:57:b8:40:
06:2a:f3:cf:d1:14:47:83:e5:99:38:64:74:7c:86:09:06:16:
9e:e5:d9:35:f1:dc:df:c4:7b:47:43:f5:8e:17:36:94:fb:2e:
9d:d1:30:1a:2d:f9:d1:d8:fa:39:69:bb:07:98:84:66:5e:ba:
80:b4:66:b0:9d:b0:a5:15:78:1c:59:1c:77:2c:64:fa:19:11:
ab:5d:b6:2f:bd:ea:91:a0:2c:bf:a3:02:84:4d:39:bc:2c:ab:
9c:c5:6c:38:a3:63:ef:96:17:59:6e:91:c1:d3:84:4e:08:6d:
b1:20:10:12:46:96:b1:bf:86:86:45:08:e5:d8:70:c5:86:08:
3e:18:55:09:50:b4:a2:3b:f9:4a:bd:10:8b:64:91:25:1d:01:
f1:af:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:53 2024 by rpki-client on console-ams.rpki-client.org