Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.cer (raw, json)
Hash identifier: hiXm50/SBfX3xU+0nVNvD8TtVE7i4eGnb+XwmbMdrWA=
Subject key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021AD4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Nov 2024 02:48:37 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 135426
AS: 138416
IP: 2401:bd60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137940 (0x21ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 12 02:48:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:d2:5a:46:68:ac:7a:f2:f7:b9:f4:1b:d7:
36:4e:0f:4a:ca:a1:73:f5:36:ac:1d:25:67:83:d0:
23:1d:2e:6f:40:2d:77:02:68:2d:42:73:6e:80:b0:
20:61:78:95:6c:41:0d:0b:91:89:c8:f0:50:c9:ca:
a5:ef:ab:34:57:87:6d:e9:85:f8:a7:c0:31:56:9a:
f8:60:c0:c0:c7:bc:23:c5:ab:31:b5:4c:32:fb:a4:
46:c5:fc:3a:19:ff:ed:61:51:d0:36:b6:c2:3f:15:
85:d7:b9:1c:67:fb:4d:93:01:62:5a:0a:53:f8:34:
aa:b5:2d:ec:95:c7:2f:73:00:b3:a8:1b:e6:f3:74:
3e:7a:57:54:16:13:33:fd:14:7e:1f:7a:d4:8e:25:
02:6a:0d:cd:bd:36:e7:71:e3:0e:58:b2:0c:49:e5:
2f:d8:af:54:c9:c3:3b:63:87:4c:4e:d0:45:32:aa:
15:55:3c:0a:17:41:5c:b6:db:42:1a:9b:b0:85:8d:
56:89:f8:b1:ec:25:58:dd:a2:ca:ab:97:bf:02:33:
53:4a:23:95:d9:24:07:2c:74:3d:9a:52:aa:74:a5:
83:47:76:1f:1c:f0:45:57:4d:f2:da:32:77:62:eb:
0a:7f:02:93:d5:bb:ad:8c:b3:13:a8:05:5b:f0:e8:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135426
138416
sbgp-ipAddrBlock: critical
IPv6:
2401:bd60::/32
Signature Algorithm: sha256WithRSAEncryption
bb:24:a7:da:d2:18:cb:e7:a4:17:00:81:ff:af:79:96:ea:c1:
d0:d8:41:5c:60:7c:49:dc:88:c1:b1:8e:fa:da:c5:50:4d:65:
4e:d4:22:98:5e:99:69:f2:ec:93:b7:a9:63:49:4d:67:62:99:
65:4a:86:c4:d1:bc:12:cf:f0:a8:f0:0a:3f:8d:47:cc:3b:c4:
9b:d6:4b:02:c4:23:d2:bd:01:2d:60:96:2f:94:f5:a4:1c:84:
a6:f5:e2:91:32:3b:4c:22:40:9c:b5:a9:09:94:dd:da:83:e2:
46:ba:3a:45:ae:10:13:80:0a:78:d0:4c:d3:38:4e:6a:f6:a4:
f0:18:68:12:56:45:13:34:62:d7:e2:1d:b1:57:03:b0:14:19:
52:f5:85:d1:35:4c:e4:d5:53:8d:2f:bf:39:25:9c:ad:3d:db:
85:ef:b1:03:e2:dc:20:58:e7:1e:ec:dc:a1:7b:bb:39:cb:9c:
75:94:04:b0:77:13:b8:54:40:c4:58:97:34:69:33:ae:a7:df:
8f:2c:e2:3a:29:3d:86:1a:70:00:e1:7d:31:6e:55:1c:eb:68:
e3:0c:d7:d6:ab:e5:5f:f3:4f:6b:d8:a4:76:29:86:ad:fb:81:
5f:97:a2:28:e4:fe:cc:a0:29:52:d4:16:1f:e2:fd:39:b8:c8:
dc:c7:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:36 2024 by rpki-client on console-ams.rpki-client.org