Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
File: eHZtYCpA71cBQmhKcj6KNAxv84I.cer (raw, json)
Hash identifier: X/2Z+cyz9GRo/BlQPShREavjZ07OSLnfxt/llraspf0=
Subject key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D6EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jan 2024 13:09:46 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.177.46.0/23
IP: 2001:df0:1c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120558 (0x1d6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 5 13:09:46 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:00:9a:c1:cf:17:db:59:42:39:f5:05:df:
11:08:d9:b8:48:08:03:9f:b4:c9:77:04:7a:23:29:
d4:5e:bc:85:98:73:e0:13:4d:d9:9c:55:e7:a2:bd:
6a:67:be:c8:40:fd:b9:17:75:5d:7c:ed:4f:04:5f:
92:44:fc:27:b7:31:fb:e7:07:2f:39:2e:50:f5:8c:
68:cc:2f:f3:d5:ab:af:61:5d:5a:d2:ad:21:c8:80:
0a:1a:d3:f6:30:00:33:1b:e2:98:05:c8:e3:78:b9:
c2:a1:da:86:7e:73:8a:15:cf:50:46:ca:bb:81:53:
53:bc:2e:19:64:84:77:08:42:8e:ab:b2:43:b6:e9:
9d:96:8e:68:79:87:7c:a5:f6:ae:59:4f:67:3b:b7:
2b:9a:12:56:a8:25:ca:50:8d:db:cb:49:68:e1:ee:
9b:89:bc:95:e6:37:b9:98:a7:69:60:82:5a:d8:78:
3d:71:11:76:ef:ea:f8:9b:b3:29:b9:e2:96:e9:d8:
7c:13:9a:6e:8a:0b:4c:8c:cc:75:0b:e7:6a:65:99:
be:83:ce:9b:90:88:b2:f4:c0:fd:19:e5:cb:88:15:
f6:c6:64:08:7f:95:64:51:e2:30:39:25:9c:25:57:
ad:1a:8b:77:9e:61:75:2c:15:9e:c7:ab:b1:96:92:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.46.0/23
IPv6:
2001:df0:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
59:ed:7d:52:4e:17:cb:b9:9e:ae:ba:5b:2b:0a:11:b9:fb:6d:
91:fa:dc:81:f2:5b:40:b2:4f:1e:a7:fd:c6:3b:1a:f9:5d:8b:
04:96:ea:cb:7c:f7:aa:6f:21:ca:ba:f3:6e:80:8d:1c:f5:9f:
e0:1f:c5:bc:2c:91:f0:8a:f5:d5:b1:f1:89:f7:83:50:02:61:
08:d5:bb:ea:01:09:54:9a:04:36:3f:45:34:e8:cb:06:83:99:
79:18:d8:95:91:a9:52:7d:fe:c8:21:ed:94:4a:53:11:24:ea:
48:24:01:98:9e:b1:e5:d2:1f:9b:03:67:43:f4:24:22:b8:d7:
ad:00:be:18:f5:a1:c0:e4:60:9a:96:93:05:a2:e2:90:54:f0:
e7:c4:15:ae:8e:3b:d3:8a:c0:e5:ac:6d:ab:06:8e:b6:a3:b8:
62:7f:4c:80:8e:93:5a:28:c2:1e:59:ca:c2:7b:3c:f3:11:57:
7a:d5:9f:b3:05:5a:27:0e:d6:be:d0:fc:8e:c2:8d:d5:e2:ad:
e9:cb:f4:e3:b3:01:71:fa:a4:57:da:67:02:b0:11:0e:a0:94:
86:25:bb:f9:9c:7d:61:ab:37:15:24:9d:be:0d:43:3f:ce:a7:
60:9e:12:fe:7a:b5:06:4e:22:00:86:3c:77:70:1a:64:f1:93:
ab:8f:b5:04
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAdbuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDEwNTEzMDk0NloXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0
QTcyM0U4QTM0MEM2RkYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrTwCawc8X21lCOfUF3xEI2bhICAOftMl3BHojKdRevIWYc+ATTdmcVeeivWpn
vshA/bkXdV187U8EX5JE/Ce3MfvnBy85LlD1jGjML/PVq69hXVrSrSHIgAoa0/Yw
ADMb4pgFyON4ucKh2oZ+c4oVz1BGyruBU1O8LhlkhHcIQo6rskO26Z2Wjmh5h3yl
9q5ZT2c7tyuaElaoJcpQjdvLSWjh7puJvJXmN7mYp2lgglrYeD1xEXbv6vibsym5
4pbp2HwTmm6KC0yMzHUL52plmb6DzpuQiLL0wP0Z5cuIFfbGZAh/lWRR4jA5JZwl
V60ai3eeYXUsFZ7Hq7GWklONAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUeHZtYCpA
71cBQmhKcj6KNAxv84IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJBNzBELzExMTRDOUJBNTk1MDExRUNBRTA5MzI4MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyQTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNw
QTcxY0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnsS4wDwQCAAIwCQMHACABDfAcQDANBgkqhkiG9w0BAQsFAAOC
AQEAWe19Uk4Xy7merrpbKwoRufttkfrcgfJbQLJPHqf9xjsa+V2LBJbqy3z3qm8h
yrrzboCNHPWf4B/FvCyR8Ir11bHxifeDUAJhCNW76gEJVJoENj9FNOjLBoOZeRjY
lZGpUn3+yCHtlEpTESTqSCQBmJ6x5dIfmwNnQ/QkIrjXrQC+GPWhwORgmpaTBaLi
kFTw58QVro4704rA5axtqwaOtqO4Yn9MgI6TWijCHlnKwns88xFXetWfswVaJw7W
vtD8jsKN1eKt6cv047MBcfqkV9pnArARDqCUhiW7+Zx9Yas3FSSdvg1DP86nYJ4S
/nq1Bk4iAIY8d3AaZPGTq4+1BA==
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:48:00 2024 by rpki-client on console-fra.rpki-client.org