Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
File: eVqDka92AR59slWmAQo0gvEJDj8.cer (raw, json)
Hash identifier: dz+Uxis7Rjf8vYxGnNjEY9gNXSIxypvehnNKBm/fUkE=
Subject key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021631
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Oct 2024 06:52:29 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 153374
IP: 2001:df4:7c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136753 (0x21631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 06:52:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:a7:d9:d2:13:88:67:d8:e5:a3:84:75:9a:
d3:ce:85:0d:d8:da:b5:87:f3:f1:b4:5e:55:ec:3c:
bb:90:9a:be:69:31:37:5f:bf:0b:7a:25:ad:4b:b6:
5c:93:ab:ae:24:83:e5:d3:39:27:8a:45:99:09:1d:
ff:e7:2a:99:19:9d:65:cb:31:54:36:d6:b7:3f:64:
6b:cb:fd:f9:9a:9d:2f:4f:74:0a:1c:7b:d1:46:89:
22:f1:6c:d3:cc:08:2d:2b:b7:d7:9e:62:3e:65:bd:
64:66:70:8b:e4:74:b9:23:d3:ae:63:1e:13:21:e3:
53:ad:5a:2e:38:9b:3f:1a:22:ca:24:85:5e:2c:b5:
9e:0b:62:51:e0:e6:fb:69:5f:34:8c:9b:c3:56:c9:
aa:4f:42:76:1f:dd:a1:58:60:3f:d1:1c:c1:a6:bc:
6c:7d:7f:21:13:b2:e8:11:05:60:7d:2a:c6:04:43:
41:9f:0c:b1:da:55:ad:f0:bd:5d:c8:40:ce:fa:32:
c6:e2:d4:0b:7e:4a:39:fc:28:89:ab:e1:8b:38:81:
e2:14:bd:ab:90:a2:38:50:d1:8c:46:ae:31:f6:07:
14:f9:ed:70:47:ec:da:8a:14:cd:22:79:01:23:e1:
4f:d6:8b:bf:79:b3:2e:6e:d4:55:d9:48:cd:e8:02:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153374
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:7c40::/48
Signature Algorithm: sha256WithRSAEncryption
60:05:a8:1f:f3:d1:26:16:39:21:c9:d9:37:51:8c:3a:0a:91:
40:53:5e:78:10:d6:5e:20:1d:e0:69:4d:81:b9:3a:6a:be:99:
8f:77:c7:ab:90:0f:c3:f2:82:53:a0:ea:72:7d:1d:22:9a:46:
90:31:bf:fa:5c:45:2d:a5:3c:a5:de:c1:61:c6:65:c3:bf:66:
6c:1d:60:02:71:9b:3d:c8:0f:ba:3a:a7:c6:0b:72:a7:04:47:
a2:3a:fa:a9:c9:31:93:21:3d:c9:43:8e:25:af:82:2e:99:fe:
6c:96:a8:e8:a0:7c:ad:c5:a1:79:3e:f5:0f:0b:ff:50:a6:79:
88:aa:8c:5e:b7:28:0c:ee:ec:a8:83:07:f6:42:c6:24:13:d5:
89:14:5e:32:05:96:d2:f9:b6:66:2b:42:53:ae:96:27:93:30:
ae:66:e6:e6:7f:77:d3:7f:d6:e5:51:af:f5:81:0e:3c:63:80:
c3:a0:a6:6e:12:e1:18:a7:de:46:e4:35:2e:fe:7b:3d:ec:64:
71:6f:b2:04:ac:c1:f6:9e:2a:86:fd:2e:76:94:d1:c0:81:3e:
64:55:86:a6:3c:be:a7:b3:10:b5:4f:e2:d0:51:c6:63:c3:0e:
50:86:ce:0a:db:bd:34:e6:b3:07:e7:86:ed:02:10:db:4f:25:
6e:6d:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:40 2024 by rpki-client on console-fra.rpki-client.org