Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer (raw, json)
Hash identifier: kY5qbdzpmwYM9sGRONzggRtoAAu2n6KUYNqgY9BSXAU=
Subject key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B2D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Jul 2023 15:57:31 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 38071
IP: 58.147.168.0/21
IP: 223.27.80.0/20
IP: 2401:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 03:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111321 (0x1b2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 15:57:31 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:70:7b:b9:59:62:af:60:72:17:12:fb:e9:
ff:d3:b2:c0:6f:64:05:69:18:da:f9:75:71:d7:63:
56:10:69:22:16:ba:70:a6:50:4f:62:35:b0:28:3e:
fc:47:67:e1:1d:f7:da:aa:f0:52:c5:dd:e4:4f:1c:
c6:72:58:52:c1:77:63:d3:49:a4:04:38:25:5b:a5:
82:f4:dc:fa:3e:98:a1:ab:95:7d:c1:c8:92:69:57:
a8:d8:ad:ea:03:18:d7:21:d4:dc:2a:1f:15:95:82:
7d:b1:40:cb:40:10:3f:ba:2c:01:98:28:db:27:27:
7b:e7:9b:77:73:f4:6e:fe:d0:b8:cf:35:ef:68:d5:
c5:1d:de:9f:1e:18:cc:37:0b:bc:cb:9f:db:ee:eb:
e5:76:eb:40:28:d2:ae:1b:5d:be:82:00:f8:52:06:
da:f8:f3:cb:b6:62:f7:4f:49:1b:fa:62:18:56:1b:
bb:b2:c4:fa:ab:79:70:bd:4e:29:48:5c:c7:17:7b:
c7:cd:fa:b7:97:09:b2:92:16:c9:65:98:11:57:ca:
49:9e:e7:fa:89:cc:49:b9:42:be:67:c8:e2:91:4a:
40:7e:70:89:a3:fc:40:71:42:ae:9f:74:f5:a7:bf:
5f:5a:c1:08:7a:ca:e6:4c:94:47:ae:ff:c2:d9:fe:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38071
sbgp-ipAddrBlock: critical
IPv4:
58.147.168.0/21
223.27.80.0/20
IPv6:
2401:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
d7:bd:7d:3b:14:ec:ac:8c:0b:39:d0:be:20:5f:e6:d8:fd:9c:
95:66:01:d0:82:10:ea:7c:eb:55:c6:49:4f:ad:24:06:5b:91:
3b:b2:57:81:5a:06:48:7d:45:37:5a:82:04:82:0e:98:30:44:
da:29:4f:68:f6:0d:6f:54:66:a3:e8:a2:da:ce:46:cd:00:05:
e4:e9:ba:91:6a:6d:8d:74:41:8e:9e:27:3e:ef:37:e9:7d:01:
01:ef:af:54:cd:ea:89:24:68:ea:7a:14:16:7b:a1:5b:2d:5e:
f3:47:a0:e9:14:8c:2b:83:a6:5e:8c:80:08:6b:68:2a:e6:91:
ff:52:87:e2:33:94:ca:49:13:fb:73:d6:64:21:f2:5a:32:ee:
47:05:4e:ea:84:fd:18:54:80:e0:33:8e:f9:78:fc:0e:81:e2:
40:e0:61:a9:6c:be:ff:87:59:9c:8a:2b:0b:81:d3:0e:de:94:
5f:b0:52:56:fd:30:c6:16:53:96:cf:18:86:83:82:07:4e:2f:
ba:30:7e:90:6f:d8:37:2c:f7:52:4b:32:7e:0d:28:0d:dd:f1:
c2:cb:a0:cf:df:2d:08:16:1b:19:26:45:29:10:c2:0c:b6:0b:
bf:c5:38:99:b2:cb:bd:f3:d8:53:a8:8c:0e:12:ec:28:22:1c:
9b:95:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:40 2024 by rpki-client on console-ams.rpki-client.org