Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
File: grPUpZa7l4hVoVXKr6iyYlMw3o0.cer (raw, json)
Hash identifier: f4QAm+wyiLDcAjgvUcYSdJ0vkSmRN95iX4ANSRfkgsg=
Subject key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F295
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 May 2024 22:18:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 17733
IP: 202.161.32.0/19
IP: 2407:7c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127637 (0x1f295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 17 22:18:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:92:be:80:35:d4:36:95:9d:f1:b9:a8:88:
fa:b8:5f:37:b4:2b:fb:9f:f2:44:98:b2:9c:a9:49:
66:df:f0:0e:a5:d6:e9:1c:88:1d:0a:4b:88:01:a0:
fe:7f:9c:bb:3b:b0:e9:04:ce:8b:1d:f4:28:05:0d:
5e:64:26:3c:97:da:57:8f:69:e7:58:b8:37:25:a5:
94:4d:cf:56:7c:98:27:f0:a4:e5:a3:b5:c7:2b:c8:
fe:12:60:7f:12:b7:3b:b8:59:76:fa:8c:ce:ff:48:
05:67:40:32:fd:e4:db:0c:32:86:64:c2:2f:9d:ff:
08:57:b6:0b:27:c1:d9:fa:e5:0f:10:6a:b1:3f:f5:
c2:28:e2:96:99:c2:5d:d3:aa:5a:02:73:0a:4e:d9:
99:3c:35:b5:53:dd:a0:79:16:c5:6c:50:d6:00:21:
1c:e3:eb:15:b5:aa:c5:96:99:ed:db:5b:1c:18:5c:
78:33:ff:06:b6:88:8c:ed:e2:59:1a:a5:1a:96:27:
6b:14:f6:0c:6f:59:89:ab:74:0c:df:91:12:eb:e5:
a7:ba:d1:e1:45:39:48:0a:90:e9:dd:32:8c:56:87:
f8:91:5d:8e:31:03:7b:4d:77:c7:fe:f4:63:90:39:
05:e9:f7:9a:d9:15:76:a3:c8:24:01:2c:dc:36:88:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17733
sbgp-ipAddrBlock: critical
IPv4:
202.161.32.0/19
IPv6:
2407:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
b7:9e:61:f5:f1:1e:44:b3:33:9f:4e:ea:8c:ce:af:0c:fa:c4:
66:e1:f7:a8:b0:62:df:ae:1c:4d:6d:62:45:d3:2c:9c:ab:97:
ed:c4:b9:4b:75:05:87:c6:97:8e:9b:f9:1b:75:ae:6e:35:79:
cb:c7:b8:bc:51:20:c2:e4:d6:bc:58:eb:a0:a8:98:3b:20:55:
0a:99:d7:26:38:90:07:51:79:95:3c:f7:b1:d6:75:eb:fd:c5:
a3:1c:7b:ab:5f:56:f5:5e:c9:c2:c4:21:cb:cd:80:f6:e1:b8:
e0:b9:f3:24:c8:01:28:41:69:96:2a:16:82:7c:f1:38:58:1f:
81:98:95:6e:17:76:1f:ec:9f:53:a6:55:26:55:8f:6d:b8:5c:
44:61:87:a0:50:19:7b:fe:b5:a0:83:06:d8:b6:09:5c:e6:30:
80:fc:be:b9:b7:0c:7c:fa:56:52:e9:15:ee:b1:a0:77:17:22:
dc:18:69:21:31:af:28:75:5f:92:7e:22:e0:41:3e:9e:75:14:
4e:7a:27:c6:67:c7:60:75:a9:8f:d0:14:f6:b7:53:ee:c6:0c:
b9:89:67:81:1a:c6:d0:ea:eb:92:7b:e2:4b:b4:62:9e:34:bd:
b6:1e:5b:27:44:1f:66:4c:f4:1f:85:f6:29:79:27:d2:02:ff:
4a:9f:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:43 2024 by rpki-client on console-fra.rpki-client.org