Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
File: dRH-79yX09DgVRW7QMF431FGqcQ.cer (raw, json)
Hash identifier: MftMQ+HIUX8OPi/bZrSCnHcwQ48vdIIKPy0qz4u58lc=
Subject key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E0EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Feb 2024 13:59:11 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 55420
IP: 27.0.4.0/22
IP: 103.29.198.0/24
IP: 2401:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123116 (0x1e0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 13:59:11 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:71:e0:0d:13:54:f3:d1:d9:d7:24:4c:5e:
8c:c6:fd:ab:1f:6b:58:83:88:f0:44:56:44:10:7f:
07:c4:a7:4e:0c:70:6f:0e:2c:01:40:49:18:12:d5:
1a:77:95:5f:8d:0a:03:40:a7:8d:8b:ce:6c:f5:72:
72:b1:10:12:bf:4d:a0:fc:54:89:b0:2b:d6:c9:f5:
b4:f5:a9:d5:3d:1c:17:9d:09:28:02:eb:e7:42:bc:
a0:ec:de:12:67:6c:6d:eb:94:88:18:1f:c4:4a:68:
f6:e8:3b:4e:6b:0a:b9:24:98:99:ae:3d:31:17:83:
fd:a0:6c:84:ee:93:94:e0:1a:dc:8c:06:8d:f9:92:
a2:a1:f4:ce:45:36:76:47:2e:d0:ef:ac:3d:5c:ab:
7d:5c:2d:5a:0b:63:dc:64:c6:fa:5e:96:a6:dc:cf:
de:29:e9:01:7c:91:83:52:f9:74:aa:a9:a0:e4:66:
d0:f8:a2:a1:45:13:b5:e7:2c:1b:7a:79:63:96:85:
ff:99:c6:9d:64:0a:5d:2c:ec:87:8c:c3:7e:bd:c1:
b6:76:7b:a3:ff:3f:a2:28:6a:0d:99:1f:96:20:d1:
94:4e:9b:68:37:a3:97:fe:e1:16:6a:80:2d:5d:ee:
6a:73:d4:83:06:6d:8f:84:fd:13:78:75:5c:ca:6c:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55420
sbgp-ipAddrBlock: critical
IPv4:
27.0.4.0/22
103.29.198.0/24
IPv6:
2401:2200::/32
Signature Algorithm: sha256WithRSAEncryption
00:17:29:33:c6:2f:d5:47:ad:4b:aa:20:eb:9b:35:98:5e:20:
c8:ed:7d:51:e7:24:1e:0a:89:99:f6:05:94:99:16:06:7f:e4:
15:ce:61:ba:a7:29:f1:97:8e:ee:23:7d:65:3f:ed:19:b0:57:
7f:0c:71:31:0e:1a:f5:08:da:3b:6c:03:87:d5:74:35:9e:f8:
85:13:5a:8b:66:93:f8:a5:c6:49:25:f1:f5:8b:d1:04:d7:0e:
fe:d9:ae:b7:4b:c9:12:db:f7:60:bb:64:27:dd:45:81:ec:c1:
59:53:d3:58:5d:a9:7f:b2:f5:c3:d4:2d:39:96:f8:83:dd:c5:
f3:2d:0c:52:6d:85:be:e7:c3:22:51:fb:e7:df:ee:cf:34:3c:
fc:aa:c6:91:18:26:ee:c6:ff:6e:9c:bf:cc:ef:1e:f6:04:71:
6a:35:cf:37:e1:44:9a:e8:4d:09:f3:59:79:61:71:46:6e:b6:
d0:3d:f4:44:7b:62:c5:66:95:7b:f7:66:52:02:55:57:c3:34:
b5:af:b1:50:dc:ed:4f:0b:0d:ae:24:6a:89:6e:7c:46:3e:57:
a9:f6:b4:17:f2:35:a6:94:e6:d4:a4:e8:58:99:c5:d5:26:0e:
7e:cf:bc:82:ba:f8:a7:9a:70:21:32:0a:01:16:3a:45:c3:21:
c9:bc:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 18:28:23 2024 by rpki-client on console-fra.rpki-client.org