Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer
File: kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer (raw, json)
Hash identifier: eglFAsCXqG9LohMeEEKeyJy8jrIVf7k6s030FeMEscw=
Subject key identifier: 92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021C81
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Nov 2024 07:45:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 133779
IP: 39.109.0.0 -- 39.109.65.255
IP: 39.109.96.0/21
IP: 39.109.105.0 -- 39.109.111.255
IP: 39.109.118.0 -- 39.109.121.255
IP: 39.109.124.0/23
IP: 2400:6d60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138369 (0x21c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 20 07:45:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:37:33:6a:ac:eb:a7:0e:a3:53:68:c2:db:
99:79:24:21:0d:61:30:3c:7b:29:25:06:88:21:da:
fd:16:3b:72:81:09:f2:a7:77:57:c5:63:3a:51:da:
01:a2:ba:4f:a8:6d:b5:93:94:98:35:51:97:e8:09:
3a:10:16:8e:19:73:bc:67:69:ae:be:96:ed:c7:b9:
4d:61:8c:31:49:81:04:c8:60:18:7e:27:95:af:85:
d8:22:b7:fc:2d:d6:f9:c8:c4:98:4c:88:fb:89:46:
8b:c4:c6:c3:34:9a:56:17:24:9e:f7:01:2d:fd:3b:
49:d1:46:55:e4:42:b2:33:65:fe:22:14:95:8e:fe:
82:00:e6:8b:81:7c:8a:fa:4e:d0:f4:4a:ed:94:21:
09:dc:ac:55:0e:ea:93:ac:12:31:3a:3c:33:01:ff:
80:e0:fd:de:4c:44:aa:eb:3d:0f:b9:cb:73:09:93:
c8:23:b7:e7:36:32:da:36:32:1f:e3:cb:ba:0f:05:
67:f5:92:86:1d:e8:38:ab:47:d1:23:59:9a:d0:79:
b9:c9:e6:08:6f:a0:97:e6:6d:74:5b:54:10:c7:18:
70:67:f4:e9:08:e8:0d:2e:7e:f1:e9:02:ba:3e:16:
b5:6d:6c:8e:62:c1:09:8f:fc:92:58:b6:a6:26:a3:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133779
sbgp-ipAddrBlock: critical
IPv4:
39.109.0.0-39.109.65.255
39.109.96.0/21
39.109.105.0-39.109.111.255
39.109.118.0-39.109.121.255
39.109.124.0/23
IPv6:
2400:6d60::/32
Signature Algorithm: sha256WithRSAEncryption
10:f0:d6:63:cd:3d:65:79:eb:58:04:da:83:20:71:6a:9c:c4:
c6:f8:6e:0a:45:55:ee:bf:96:95:a1:34:ae:2f:36:53:0d:bd:
72:03:77:88:a8:b3:b4:4e:19:99:7d:28:dc:8f:20:27:1c:b9:
14:b8:91:75:e9:6b:a3:86:1a:d7:79:43:38:e2:5f:3d:28:25:
fd:c9:82:47:c9:b9:32:af:4a:ea:e9:be:42:a8:c3:08:c1:a9:
df:ff:04:bf:ca:d7:ce:d4:81:97:3d:c8:47:fa:61:5f:89:05:
ee:76:95:e0:bc:4f:78:e4:20:a8:f9:9f:a9:89:aa:a5:0a:5d:
d6:1e:16:84:0b:73:dd:ca:27:7e:84:89:26:e2:51:fc:a2:97:
17:23:3d:1a:ad:06:e9:01:35:01:84:57:0f:a9:4f:ee:f1:38:
f6:85:38:6d:21:f8:06:ca:2b:22:b7:8e:d7:79:2a:97:c8:1a:
02:3f:26:f3:78:e3:78:07:b6:2a:24:37:af:2e:19:06:e4:32:
57:0a:d6:e5:01:79:db:35:d9:2d:6b:8e:9b:e2:2f:36:2b:ca:
48:ca:3a:f0:12:8d:34:2b:82:8b:19:68:52:15:6b:4d:22:0f:
70:e3:4f:30:47:e7:aa:0c:3f:0a:53:59:0c:c2:05:74:19:4d:
ca:2f:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:45 2024 by rpki-client on console-fra.rpki-client.org