Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
File: kyJx_Edfot2dkzESKwelKNOPjv0.cer (raw, json)
Hash identifier: jUwD34iZSKktJe9LKRMkWqPwgCyVZYmFgddv572lY+A=
Subject key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CDEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Nov 2023 14:40:34 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 23978
IP: 202.38.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118252 (0x1cdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 30 14:40:34 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:e2:de:f3:21:d3:43:9e:64:1a:05:5c:6b:
3e:a6:d0:bd:0a:40:90:4e:29:e5:e3:4e:5e:20:2b:
d1:79:86:5d:e1:0a:4b:9e:c7:03:7a:f2:b4:bd:80:
ea:39:03:d5:d4:82:83:c5:bf:07:e7:3e:e7:85:62:
86:3d:ba:10:0b:ad:30:4a:e7:b3:b6:59:de:d2:97:
9d:7a:58:40:c5:6d:12:b5:09:bf:23:b9:00:5c:4f:
4d:49:bf:17:89:5a:2d:f6:b4:3d:ac:0e:ce:3d:7c:
89:66:d2:9f:2b:31:35:7a:3c:f9:72:c4:88:b2:c6:
2c:12:ec:f3:5a:52:dc:b8:29:df:93:3d:88:c9:64:
e8:75:c0:76:9c:3c:dc:5e:4b:20:48:b8:f7:c3:83:
21:51:c7:d1:d9:c2:31:6b:3f:01:6c:5f:fc:b3:8d:
d7:1b:db:6a:87:90:4a:3e:41:19:79:4b:50:97:70:
60:a6:a5:ae:5f:51:83:f7:db:5a:f6:eb:cc:ba:56:
51:95:4d:3a:9d:29:5b:74:9f:bf:a9:dc:96:81:70:
2e:2a:16:9e:4f:9d:c8:4d:a3:ec:6c:82:9c:c6:11:
b6:f4:f0:09:86:8e:91:a7:9d:76:95:e3:12:d8:45:
3d:4c:3b:1f:d9:25:12:f3:55:18:6d:b6:d5:93:69:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23978
sbgp-ipAddrBlock: critical
IPv4:
202.38.178.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:b8:ed:dd:86:63:e6:d6:32:da:71:76:c6:81:38:6a:33:ec:
33:1a:54:06:9b:1b:05:2f:ea:2b:53:c3:4c:d3:18:c1:aa:95:
30:5d:f3:c8:2f:d9:f7:b0:7e:44:45:2d:c4:62:d2:a8:79:49:
8b:2a:61:02:d6:4e:ff:5a:e3:d4:00:a3:e4:e1:04:2d:3c:76:
0e:b6:00:ae:f7:07:71:90:1b:3a:8b:02:b8:7b:48:23:d8:05:
55:0d:f1:06:b6:44:c6:10:41:64:3d:f9:05:02:58:5b:14:80:
12:30:c7:90:9d:3a:60:2a:a4:55:43:ba:08:62:1f:91:d3:29:
d7:4d:bd:59:0c:8b:a3:80:76:1f:d0:7d:a6:9e:40:47:d8:16:
a4:8c:ca:bc:ed:79:ea:3b:55:a8:6c:fc:e8:a0:9b:ec:74:19:
51:c9:61:3f:76:a6:95:f3:7b:ce:53:73:ec:05:6c:ae:84:d0:
0d:22:90:42:a7:a4:3c:66:e7:e1:fd:a7:47:df:be:18:13:37:
e1:fd:dc:73:f2:b6:d2:30:cc:4e:2f:41:1a:c2:e3:b5:f8:cf:
4f:d7:21:ff:20:d0:23:42:ae:84:ce:63:72:0c:0a:c6:8a:7f:
36:09:aa:16:78:ed:08:d4:8d:5d:6c:78:6d:54:48:03:3e:0d:
89:0d:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:34 2024 by rpki-client on console-fra.rpki-client.org