Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.cer (raw, json)
Hash identifier: 3KiGLD2RBt8aSWXdcILwjFUq8w9z4r0VxRpY4K+hLVY=
Subject key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D7E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Jan 2024 08:59:08 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 103.141.220.0/23
IP: 2001:df1:1380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120806 (0x1d7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 11 08:59:08 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:ba:03:31:d1:1e:80:9b:94:52:fe:78:7a:
9f:24:1a:7a:4d:95:91:41:1b:03:fc:30:09:17:76:
74:ca:0f:3c:b0:9f:3c:5a:45:31:fa:d2:00:6b:a8:
87:73:dd:b2:c6:2b:21:7b:0c:a3:23:66:51:44:b0:
42:b9:12:44:ab:3f:79:ab:e0:a4:59:ae:a4:7d:c9:
31:99:0e:5a:82:54:fd:7e:f2:48:0a:02:6c:9e:7a:
9e:33:cb:cd:c5:dc:aa:a2:2f:0f:af:85:d6:7d:05:
37:d5:71:7c:99:cf:c8:eb:67:bb:ed:15:42:73:a5:
47:8c:1c:41:db:c6:11:ad:f5:7a:65:fd:74:0b:6f:
bc:9f:0c:88:3c:e9:11:90:60:8b:4b:f7:15:37:5a:
24:d2:a2:47:eb:b0:54:c2:84:d7:a6:77:f7:c6:99:
ed:52:cf:e3:f8:f5:76:34:7c:ed:75:92:2e:6d:cb:
1e:87:0e:d0:46:4e:b9:64:00:de:84:5a:06:32:f7:
d7:38:b0:7a:b1:f1:c8:88:05:d8:42:9e:7b:f0:0f:
08:f8:b7:cc:39:43:29:82:c0:3d:19:8c:18:a2:de:
a9:a1:8d:f4:04:e2:c9:a5:24:00:38:51:37:cf:19:
eb:f1:1a:34:68:41:85:42:af:65:a6:b6:64:b1:fe:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.220.0/23
IPv6:
2001:df1:1380::/48
Signature Algorithm: sha256WithRSAEncryption
57:1f:b4:7a:9a:30:92:d5:24:ff:37:ea:b9:c1:ca:c9:81:e7:
dc:2a:d8:ec:23:cc:44:6c:8c:10:a8:06:d8:f9:81:c8:1c:49:
73:50:62:e2:56:08:00:ae:f8:8f:eb:b0:88:46:6c:b5:09:a6:
40:c9:4c:95:ef:41:e5:3a:97:aa:f0:55:29:54:ea:f5:18:8c:
b9:e5:27:a4:22:c9:d1:57:42:9c:fc:1f:e1:9e:9a:a9:38:4f:
58:c6:83:21:06:59:83:cb:03:04:30:24:c6:1a:ec:6f:ca:49:
bb:52:94:e8:24:39:eb:14:32:ba:1e:17:6f:9b:fc:1d:54:b1:
b9:04:c0:52:c7:ef:1b:fe:dd:af:13:5c:3c:09:2f:f0:b4:e0:
cd:db:20:64:45:2b:8a:3d:1c:3d:6a:41:93:c7:48:17:8c:64:
51:ac:88:5f:12:eb:8d:56:5d:94:c2:c2:75:8c:84:31:5e:2f:
82:94:94:30:13:6f:d2:e9:bb:21:de:d3:23:cb:57:ae:7a:18:
02:c1:a7:23:33:7e:dd:9c:74:8e:16:a7:da:dd:97:cd:39:36:
18:71:e4:7c:3a:66:16:87:3d:7e:cd:7e:85:d4:02:c3:83:74:
d0:d6:5b:db:cc:30:88:cf:1d:be:83:8b:ff:51:18:5c:f7:3c:
52:dc:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:52:50 2024 by rpki-client on console-fra.rpki-client.org