Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
File: kyJx_Edfot2dkzESKwelKNOPjv0.cer (raw, json)
Hash identifier: rbyYXDTaj5JDZehQHGRS82eSehG8ej2/oyTi+roO0HQ=
Subject key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021847
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 04:36:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 23978
IP: 202.38.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137287 (0x21847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 04:36:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:e2:de:f3:21:d3:43:9e:64:1a:05:5c:6b:
3e:a6:d0:bd:0a:40:90:4e:29:e5:e3:4e:5e:20:2b:
d1:79:86:5d:e1:0a:4b:9e:c7:03:7a:f2:b4:bd:80:
ea:39:03:d5:d4:82:83:c5:bf:07:e7:3e:e7:85:62:
86:3d:ba:10:0b:ad:30:4a:e7:b3:b6:59:de:d2:97:
9d:7a:58:40:c5:6d:12:b5:09:bf:23:b9:00:5c:4f:
4d:49:bf:17:89:5a:2d:f6:b4:3d:ac:0e:ce:3d:7c:
89:66:d2:9f:2b:31:35:7a:3c:f9:72:c4:88:b2:c6:
2c:12:ec:f3:5a:52:dc:b8:29:df:93:3d:88:c9:64:
e8:75:c0:76:9c:3c:dc:5e:4b:20:48:b8:f7:c3:83:
21:51:c7:d1:d9:c2:31:6b:3f:01:6c:5f:fc:b3:8d:
d7:1b:db:6a:87:90:4a:3e:41:19:79:4b:50:97:70:
60:a6:a5:ae:5f:51:83:f7:db:5a:f6:eb:cc:ba:56:
51:95:4d:3a:9d:29:5b:74:9f:bf:a9:dc:96:81:70:
2e:2a:16:9e:4f:9d:c8:4d:a3:ec:6c:82:9c:c6:11:
b6:f4:f0:09:86:8e:91:a7:9d:76:95:e3:12:d8:45:
3d:4c:3b:1f:d9:25:12:f3:55:18:6d:b6:d5:93:69:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23978
sbgp-ipAddrBlock: critical
IPv4:
202.38.178.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:94:aa:cb:aa:f5:92:fd:1a:e0:f1:cb:11:1f:59:aa:ba:ed:
78:43:e9:6b:fc:e1:ae:9d:66:db:91:b6:f1:93:55:e4:fa:7d:
ad:f7:8a:6f:a9:16:0d:df:61:8c:60:a2:2a:e3:ff:c3:35:11:
be:32:42:25:10:a8:43:a4:e1:f7:e7:03:1d:fe:84:a6:29:60:
2d:5b:e4:82:61:3e:a1:5c:3e:79:b4:69:6d:78:9f:0f:fb:6b:
e1:f7:b3:c6:d6:27:c4:b9:a1:d8:2a:39:df:4c:fe:be:a1:18:
fd:2b:b0:21:a8:1e:ae:25:56:a8:41:6c:d5:a0:cb:f9:3c:97:
88:59:1c:51:cb:a4:01:0b:a7:34:49:2d:51:cd:63:c3:cc:d5:
8b:6e:7c:cc:33:e1:25:1f:50:73:f4:c4:70:24:8a:ab:6c:81:
ca:5e:df:f4:da:14:29:e0:30:9f:8d:bd:16:dd:8b:7b:b4:e2:
02:07:97:9b:33:21:f8:94:48:0f:1e:f3:42:cf:60:c1:49:88:
02:a3:ac:ff:2f:8d:ba:26:20:cb:da:d4:b7:de:78:d5:d7:18:
d5:88:da:eb:f5:88:8d:0e:f9:63:0f:8f:52:6b:c8:45:58:72:
b1:cb:35:61:53:aa:24:55:12:d4:d0:ff:bb:4c:e2:0a:92:44:
eb:fc:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:00:00 2024 by rpki-client on console-ams.rpki-client.org