Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer (raw, json)
Hash identifier: g5IT+mZS9TnBNMFzYiBRC3xMWj2vmDVp7ZJoki2BTWA=
Subject key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FE75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jul 2024 13:48:49 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 2402:4680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130677 (0x1fe75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 5 13:48:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:23:8d:5d:6b:c7:d8:10:1d:fc:c5:02:89:
17:99:22:a0:12:3b:5b:b3:44:92:93:92:dc:70:ac:
3e:23:1c:c6:9c:b2:63:54:10:13:62:34:25:5e:7f:
d4:71:22:af:4f:cf:cd:2c:36:4f:6d:cc:56:a0:18:
cd:a4:99:47:15:56:7f:e6:40:a7:68:91:57:ee:41:
17:b8:47:e8:0a:4e:52:3a:1a:ca:91:4d:ca:3d:3a:
51:16:4e:d3:7b:95:03:90:dd:5a:a2:b8:51:a4:54:
2e:1b:ad:9d:c8:e2:8b:a9:01:64:41:38:1d:61:35:
43:ae:43:3c:ff:5d:46:83:10:6d:03:70:1e:16:1f:
08:f1:69:54:eb:a8:de:c2:3f:52:d0:8a:68:4d:4f:
58:37:7e:0a:fe:d8:5b:b9:02:58:94:8b:fd:e0:a8:
88:b8:79:96:f1:e3:c3:f2:19:4d:a7:e6:c5:56:46:
4c:9b:a9:cf:ea:d8:d1:c9:92:6d:e7:58:1c:dd:fb:
67:ee:9c:87:a0:49:cb:7e:03:9c:c2:19:21:7b:95:
fa:a8:af:c6:c7:3a:fb:05:6b:e5:11:a2:9f:11:3d:
d5:07:c6:8a:ee:c6:e1:ff:b8:b1:79:f2:eb:bd:85:
50:57:20:01:f7:c8:c1:6a:4c:38:4f:f7:3e:a5:1e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4680::/32
Signature Algorithm: sha256WithRSAEncryption
77:6c:14:d8:e5:c9:4c:d8:0c:40:ea:fb:da:cc:4d:05:f0:91:
91:e9:db:e0:a9:97:53:5c:fa:c3:90:dd:33:f4:4d:31:7e:21:
4f:f9:84:66:09:a1:bd:db:84:9e:00:ba:44:da:b8:98:57:4c:
7f:9f:ad:9d:38:8f:09:77:97:29:1b:60:85:3d:bf:cb:58:3d:
9a:32:9a:43:8c:5f:a4:34:65:03:a0:da:bb:fa:52:17:32:a9:
51:57:85:10:ad:aa:2f:ea:75:dd:e0:2a:f2:2c:22:25:dd:40:
68:be:55:b8:75:75:78:26:6a:f8:da:5f:ab:12:6a:a8:0e:3e:
f5:7e:73:fb:a2:34:97:79:b6:3a:d8:a6:9e:6d:e7:bd:08:db:
cc:d3:c6:3c:fb:61:23:71:74:23:22:50:a2:23:69:36:6d:27:
4a:8e:66:ee:76:23:24:b3:88:a6:ca:7c:e5:fd:14:63:11:2d:
74:c7:11:84:37:b7:6e:1b:e4:20:15:d2:f8:4a:f6:ad:9e:af:
82:ef:84:f2:e5:5c:ed:ee:0b:11:77:2f:a6:55:9d:e6:62:bc:
6a:1e:47:a7:91:9b:b4:2b:26:09:ac:91:ed:f9:e9:af:1d:26:
d2:6f:1d:ba:39:33:03:ab:3d:f3:79:af:48:ae:47:81:e8:d7:
ac:44:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:41 2024 by rpki-client on console-fra.rpki-client.org