Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUk2UwsP-H5UDYRskCD7hNO19YM.cer
File: kUk2UwsP-H5UDYRskCD7hNO19YM.cer (raw, json)
Hash identifier: PrwXYEnegWkIxi1a9ZNyf4ZQPcVKCzenaq8jvS57eRA=
Subject key identifier: 91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DE78
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Feb 2024 14:31:15 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 43.248.164.0/22
IP: 103.25.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122488 (0x1de78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 12 14:31:15 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A913D680/serialNumber=914936530B0FF87E540D846C9020FB84D3B5F583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:66:2e:5a:60:c7:c5:61:be:d7:ef:d8:9e:
6e:bb:cf:1f:ee:af:6f:48:6f:f8:98:3f:af:91:2c:
7c:66:c3:a8:fc:56:cd:92:57:99:05:bf:79:8a:14:
a0:51:32:e1:58:28:60:f5:dc:b1:4c:ca:26:cd:76:
d5:e3:95:1b:8b:fe:72:bd:12:0e:78:7f:9b:61:8d:
db:54:7f:f0:64:4b:bb:74:95:98:ab:06:7a:4f:bf:
bc:b2:51:7e:63:c3:3b:ee:fd:44:43:a9:3a:49:5d:
5e:83:a2:a2:61:6d:06:53:76:3d:b1:94:2b:2b:d4:
59:22:11:f0:54:76:53:92:65:5a:4a:91:70:88:54:
1f:fd:72:ba:a1:02:c5:aa:2d:02:8a:44:ad:f3:43:
86:1c:0d:fb:41:0a:fe:b4:09:aa:af:22:3c:90:de:
be:ef:2a:b7:37:31:de:b2:ee:d4:be:90:a6:f4:1a:
46:ba:6f:04:d8:a9:2a:8e:59:74:f2:7c:5e:e8:7d:
20:94:27:8a:30:e8:c2:6b:ba:44:bc:bb:6d:19:29:
09:3e:bf:ba:62:14:1a:93:6b:38:ff:b1:ac:c4:a1:
f9:70:5b:f1:ba:95:73:62:4d:d8:a3:ff:0c:06:8b:
50:2a:f5:21:52:ad:4e:18:7c:88:97:d2:ca:1c:3d:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:36:53:0B:0F:F8:7E:54:0D:84:6C:90:20:FB:84:D3:B5:F5:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D680/8E286682553C11EB8C630F72C4F9AE02/kUk2UwsP-H5UDYRskCD7hNO19YM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.164.0/22
103.25.72.0/22
Signature Algorithm: sha256WithRSAEncryption
34:16:9d:18:bc:70:96:11:ae:b3:3b:df:19:37:19:35:48:b2:
d4:9d:8a:5d:59:1a:a6:49:e8:1c:56:c9:49:79:f4:ff:56:5d:
44:9a:60:00:19:dc:70:87:58:54:2a:8a:44:3d:de:2a:6e:34:
b5:c2:14:7a:46:d2:86:5e:81:09:3f:fd:eb:69:50:6d:7f:7a:
4d:6b:e2:63:3c:1a:95:4f:76:95:78:93:3f:54:af:a1:53:2d:
09:93:8b:de:62:8e:a7:12:16:cd:46:a4:d5:1a:2f:88:e0:f8:
35:6c:b7:34:61:a8:d3:23:e8:bf:cc:67:35:cd:84:e8:a2:ef:
3e:e0:92:09:a6:0c:c5:36:d0:00:bf:35:37:0e:17:c9:dd:5c:
6d:c2:4f:ca:b7:23:4f:60:25:3a:2d:1f:56:76:e2:bb:a9:3e:
e6:85:bd:eb:11:49:95:50:0e:74:5d:d2:a8:5d:3b:96:61:e3:
da:1d:8e:0e:69:ad:62:03:ba:ae:43:5c:e7:28:92:56:b1:bc:
dc:f3:e3:dc:b9:5e:e3:49:75:cd:f0:80:4b:5d:72:be:51:ea:
2a:90:58:ca:fb:6a:00:a2:eb:4b:4e:38:bb:82:d4:d1:d5:1a:
6f:44:45:a4:27:f1:a9:77:e9:94:c1:8b:0d:bb:16:08:be:89:
ff:4e:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:48:04 2024 by rpki-client on console-fra.rpki-client.org