Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer
File: kuhI5x9wCNzHd7jiP3PaknjJpQ4.cer (raw, json)
Hash identifier: o/9F2Ms7LGxL3nU1Y39H2J8jQWa2+qjWSozgt+qvAR4=
Subject key identifier: 92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A384
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 May 2023 12:45:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.137.120.0/22
IP: 2404:b040::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107396 (0x1a384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 12:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A911D5F1/serialNumber=92E848E71F7008DCC777B8E23F73DA9278C9A50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:2a:85:b5:22:a9:4a:9a:0d:22:04:6d:b8:
1f:db:1c:dc:98:06:87:66:c9:39:46:b2:ff:ac:44:
60:4c:23:08:b2:ec:5c:c4:52:ed:e7:88:66:32:90:
49:1c:41:16:3c:a5:6f:cd:0c:82:95:17:32:ee:4c:
92:3f:c9:18:e5:b4:5f:bb:3f:e3:ee:94:c7:7b:65:
46:5b:7b:08:86:0e:83:3b:33:72:af:de:43:e4:1f:
9d:1f:70:43:43:81:f6:c2:c3:c9:ad:52:86:53:66:
f1:3f:b5:45:2f:e3:ea:5c:79:88:cf:3b:93:85:7b:
e7:43:a7:8b:c5:24:53:aa:75:6c:33:a3:8b:d0:4b:
e1:df:56:db:21:70:47:68:75:2a:93:33:4b:0a:fc:
98:95:4a:29:e7:10:cf:e1:9a:24:45:c4:e1:6a:88:
60:ce:d5:b1:8f:e5:19:4b:c3:6c:c4:7c:7f:58:7c:
3a:a0:c4:ee:de:d3:c7:18:fb:95:e3:d8:cc:bc:9d:
4f:e2:a4:4b:71:d1:75:f2:48:1f:f8:f2:3d:b8:00:
ba:53:30:52:3a:9f:2a:a0:a6:1e:f5:d1:f3:59:e9:
80:88:41:ee:0b:05:8d:0a:6b:ba:a0:58:cb:e9:58:
f3:c1:ce:15:6e:82:6c:95:ad:36:c7:1f:8c:ed:b3:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:48:E7:1F:70:08:DC:C7:77:B8:E2:3F:73:DA:92:78:C9:A5:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D5F1/A95E6C02506211E9BFCB4C87C4F9AE02/kuhI5x9wCNzHd7jiP3PaknjJpQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.120.0/22
IPv6:
2404:b040::/32
Signature Algorithm: sha256WithRSAEncryption
87:09:0a:b8:f8:79:b3:d5:6b:75:10:fb:e4:50:68:cd:37:f6:
42:9d:7e:02:54:8b:4d:23:f7:50:e8:5f:6a:32:7e:52:8a:3a:
97:6f:b1:dd:75:fd:49:0f:1f:1b:e6:87:da:2c:ff:c4:c7:e9:
af:fb:9e:82:5f:27:99:8a:07:49:75:d9:a9:31:64:72:29:89:
d2:bc:6a:22:c7:1d:34:fe:d9:53:f9:f5:21:96:29:eb:e6:8b:
f8:c2:46:c6:65:0b:44:c2:89:42:58:82:75:79:9e:62:2a:4e:
04:e2:3f:4a:29:10:92:a2:69:9e:5e:ae:ab:fd:60:53:e4:87:
45:be:63:1f:4c:98:ce:84:6a:e9:4d:18:8e:06:c7:55:d9:75:
71:7b:05:e3:70:af:54:42:f0:c5:e6:9c:dc:93:33:5c:b3:b8:
ca:5e:dc:79:94:c0:8c:6e:a0:28:31:c0:8e:31:ef:92:14:48:
7f:ac:af:9e:f6:95:29:13:74:0a:62:00:7a:c5:b8:f6:02:74:
df:f5:e2:fb:d1:d0:83:31:49:25:83:8b:df:91:b4:7c:68:bc:
1a:34:99:b7:8f:e3:d9:a8:d1:94:ba:c6:ba:f5:cf:71:c4:1d:
b8:42:23:29:42:10:5e:cc:a4:3d:a5:35:cb:96:36:ca:08:66:
27:17:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:33 2024 by rpki-client on console-fra.rpki-client.org