Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
File: eE7A8P-dbYDcn33OORSfxg-WFJk.cer (raw, json)
Hash identifier: D4ZDtAxI0XleY7VLHxG0Rfvo1h2ZTXVM5A2M95ZOaR0=
Subject key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FB41
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Jun 2024 10:06:43 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 153037
IP: 2001:df3:fa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129857 (0x1fb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 26 10:06:43 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:03:dd:e6:5a:d5:3b:74:f8:62:61:4a:d4:
eb:70:3c:bd:a9:a7:dc:e1:de:b6:9e:a8:82:5c:10:
3f:52:ef:d4:72:72:d0:38:0b:e8:f1:68:b0:ea:01:
47:c6:c1:4a:80:19:95:34:3f:0c:bb:1b:4e:f6:e1:
9a:5f:df:71:f3:b2:6f:6a:b5:c0:6a:5a:d4:f1:e3:
fc:42:f9:d2:e1:e7:0a:c8:63:bc:4f:ad:f5:d6:15:
72:99:fc:c5:4b:72:f7:ac:d4:ab:fc:fe:49:fc:fe:
21:5d:27:72:9d:df:cf:86:96:7d:47:1d:57:bc:fd:
24:d0:76:da:9e:f0:03:61:76:c5:65:9b:28:f4:5e:
9a:66:7f:17:f8:74:44:b0:3c:3c:cc:54:70:83:87:
99:97:2d:3b:94:90:12:f3:6f:60:cf:23:0b:d2:30:
1f:d8:37:6c:c8:26:9f:89:9a:6c:83:17:a5:4a:ff:
69:a3:31:75:0f:36:f6:07:91:b1:27:1f:21:7a:24:
f5:04:ab:e4:d5:26:ed:14:68:7d:89:e8:d5:44:c0:
8b:63:01:f4:78:03:f7:cc:f1:c6:4c:2e:95:7f:43:
5b:39:08:54:79:54:a6:0d:d7:4b:f5:0b:7b:5f:ff:
83:11:df:f1:bc:21:43:62:43:51:66:e0:b4:c5:45:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153037
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:fa40::/48
Signature Algorithm: sha256WithRSAEncryption
b7:29:a6:c7:0d:41:10:a2:34:e4:03:e4:8a:d9:bf:25:a7:96:
cc:2b:61:96:8f:bd:d8:2a:f6:21:07:86:ca:6b:f3:58:71:be:
f9:b6:9b:b8:94:25:a6:0d:cc:7d:26:7f:30:e5:5f:45:69:55:
64:e7:e4:d5:22:b4:59:73:42:6b:4e:71:87:27:c8:12:6d:fc:
79:2f:48:26:df:a8:38:1d:f5:82:8f:f1:bd:4d:11:45:0f:bf:
8c:05:af:ab:59:58:f9:5c:5f:50:6f:ad:a8:f4:49:5f:f8:84:
6e:37:82:e7:ff:29:89:e0:70:8e:2e:48:c4:b3:81:91:c7:61:
d2:c6:25:27:15:8d:09:1d:6e:dd:9f:81:9b:3d:11:12:8c:50:
df:f1:a6:8e:2f:5c:ac:b3:75:9f:6a:af:3e:b4:75:c0:eb:22:
73:fc:40:5d:8a:45:38:ad:85:dd:77:c6:41:46:bb:2e:e8:67:
46:37:d2:30:83:81:45:1d:92:19:b3:53:61:75:b9:2d:2f:27:
b4:b8:a4:de:aa:0d:36:0b:ef:81:9d:9d:38:e9:a3:91:82:31:
ca:42:fd:9c:fa:79:31:7a:5d:d0:ef:6f:2e:d9:26:cd:8a:7c:
e4:7c:fc:53:70:2d:b3:b1:57:7e:4c:47:c6:29:4d:24:a2:be:
fb:8b:d8:c0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAftBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYyNjEwMDY0M1oXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RD
RTM5MTQ5RkM2MEY5NjE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF4QPd5lrVO3T4YmFK1OtwPL2pp9zh3raeqIJcED9S79RyctA4C+jxaLDqAUfG
wUqAGZU0Pwy7G0724Zpf33Hzsm9qtcBqWtTx4/xC+dLh5wrIY7xPrfXWFXKZ/MVL
cves1Kv8/kn8/iFdJ3Kd38+Gln1HHVe8/STQdtqe8ANhdsVlmyj0Xppmfxf4dESw
PDzMVHCDh5mXLTuUkBLzb2DPIwvSMB/YN2zIJp+JmmyDF6VK/2mjMXUPNvYHkbEn
HyF6JPUEq+TVJu0UaH2J6NVEwItjAfR4A/fM8cZMLpV/Q1s5CFR5VKYN10v1C3tf
/4MR3/G8IUNiQ1Fm4LTFRac7AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUeE7A8P+d
bYDcn33OORSfxg+WFJkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBNjlGL0M2NjVERjIyMzNBMzExRUZBNUI0OUIyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAt
ZGJZRGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlXNMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8/pAMA0G
CSqGSIb3DQEBCwUAA4IBAQC3KabHDUEQojTkA+SK2b8lp5bMK2GWj73YKvYhB4bK
a/NYcb75tpu4lCWmDcx9Jn8w5V9FaVVk5+TVIrRZc0JrTnGHJ8gSbfx5L0gm36g4
HfWCj/G9TRFFD7+MBa+rWVj5XF9Qb62o9Elf+IRuN4Ln/ymJ4HCOLkjEs4GRx2HS
xiUnFY0JHW7dn4GbPRESjFDf8aaOL1yss3Wfaq8+tHXA6yJz/EBdikU4rYXdd8ZB
Rrsu6GdGN9Iwg4FFHZIZs1NhdbktLye0uKTeqg02C++BnZ046aORgjHKQv2c+nkx
el3Q728u2SbNinzkfPxTcC2zsVd+TEfGKU0kor77i9jA
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:57 2024 by rpki-client on console-ams.rpki-client.org