Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEyeF34uazfkomCrI0zlR-DNmrw.cer
File: mEyeF34uazfkomCrI0zlR-DNmrw.cer (raw, json)
Hash identifier: mdbc5lJwBsqC/izFaCB50pc4nbsA70CeUKufwTqEDuA=
Subject key identifier: 98:4C:9E:17:7E:2E:6B:37:E4:A2:60:AB:23:4C:E5:47:E0:CD:9A:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F26D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/mEyeF34uazfkomCrI0zlR-DNmrw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 May 2024 04:48:38 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 203.17.4.0/24
IP: 203.17.95.0/24
IP: 2001:df0:421::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127597 (0x1f26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 17 04:48:38 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91ADF45/serialNumber=984C9E177E2E6B37E4A260AB234CE547E0CD9ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:90:57:b0:21:9e:01:46:a1:bf:be:ad:8c:
51:70:ea:9d:65:96:48:8b:ee:5a:1e:1c:90:db:aa:
95:9a:5b:6b:d9:f4:95:2d:40:bb:cb:4c:56:e2:34:
8b:dd:0f:10:85:a8:1e:0e:ec:45:3b:60:88:f3:21:
b1:f3:39:a1:14:d5:f7:f8:90:72:16:d3:6f:db:d9:
df:a1:d7:c7:f7:5e:67:d4:be:64:ce:86:c3:21:f7:
c6:59:19:63:45:84:cd:1e:cf:e4:35:aa:e2:43:8e:
c2:46:6a:f1:bf:95:bb:67:79:e1:fa:ef:dc:01:f4:
24:00:f6:4f:7b:e3:a6:93:ca:0a:9c:6e:61:f8:41:
cb:e1:4a:95:7d:d9:88:41:92:75:d4:57:be:1b:3c:
10:ec:2c:5f:a8:ca:0b:b1:de:f2:8d:db:30:61:71:
5a:e1:4d:52:42:e1:e8:02:2c:2a:24:f1:2a:a3:18:
11:01:a3:41:bd:8f:67:db:1f:df:7e:04:be:e1:fa:
90:bc:b6:ba:73:df:f6:2d:c8:67:20:5c:82:62:0e:
da:95:45:a6:a0:7f:fb:92:3d:29:59:68:9d:44:6c:
dc:19:db:c4:12:bd:8c:6d:98:78:4a:26:3f:a9:18:
f5:5c:59:63:47:e4:b1:d3:03:e0:d0:31:8e:1f:9d:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:9E:17:7E:2E:6B:37:E4:A2:60:AB:23:4C:E5:47:E0:CD:9A:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/mEyeF34uazfkomCrI0zlR-DNmrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.17.4.0/24
203.17.95.0/24
IPv6:
2001:df0:421::/48
Signature Algorithm: sha256WithRSAEncryption
a6:68:c8:bf:9c:1a:ef:22:ad:e3:0c:df:52:e8:41:05:ef:81:
a8:0f:10:5f:d1:01:bb:47:1e:7a:64:b6:27:ce:c8:61:bd:40:
e0:4d:50:24:3e:18:f7:48:64:d0:67:cc:a4:6c:85:55:1d:d8:
4a:17:e3:eb:3f:3e:bd:3d:5a:28:19:a9:07:cb:f7:d6:96:7d:
d4:7a:1b:c0:a8:33:d0:da:8c:5f:d5:1e:9b:81:61:9d:b5:86:
e3:c0:25:06:fd:41:4f:ef:9f:51:f2:a0:40:9f:4c:bd:2e:08:
15:9c:9f:f6:87:10:64:ab:87:d9:d7:8c:e7:33:49:75:68:b3:
15:cc:30:26:39:bc:4b:0a:c8:ef:8e:4a:f8:81:29:fa:16:41:
89:96:b8:4f:f3:2c:f1:4e:87:4b:7c:1c:e4:09:1b:04:b2:a0:
91:c1:8f:01:a5:39:dd:c8:b6:be:aa:00:8a:56:d5:9d:7e:44:
28:93:35:2f:d5:be:a0:51:0c:33:cf:7c:98:ea:73:25:dd:84:
ad:a7:7a:42:a7:e1:06:81:d9:8f:54:35:96:34:f7:e9:23:89:
99:36:d7:e4:ab:d2:46:cb:e2:d2:c0:31:ee:95:9f:75:e9:f4:
1d:1b:37:2f:e8:30:0a:c9:5a:12:03:38:67:89:b8:22:d8:47:
22:d1:7b:70
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIDAfJtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUxNzA0NDgzOFoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQURGNDUxMTAvBgNVBAUTKDk4NEM5RTE3N0UyRTZCMzdFNEEyNjBB
QjIzNENFNTQ3RTBDRDlBQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHyZBXsCGeAUahv76tjFFw6p1llkiL7loeHJDbqpWaW2vZ9JUtQLvLTFbiNIvd
DxCFqB4O7EU7YIjzIbHzOaEU1ff4kHIW02/b2d+h18f3XmfUvmTOhsMh98ZZGWNF
hM0ez+Q1quJDjsJGavG/lbtneeH679wB9CQA9k9746aTygqcbmH4QcvhSpV92YhB
knXUV74bPBDsLF+oygux3vKN2zBhcVrhTVJC4egCLCok8SqjGBEBo0G9j2fbH99+
BL7h+pC8trpz3/YtyGcgXIJiDtqVRaagf/uSPSlZaJ1EbNwZ28QSvYxtmHhKJj+p
GPVcWWNH5LHTA+DQMY4fnQwPAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUmEyeF34u
azfkomCrI0zlR+DNmrwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFERjQ1L0I1QjNGNkM0MTQwODExRUZCOUQyMDc1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBREY0NS9CNUIzRjZDNDE0MDgxMUVGQjlEMjA3NUFDNEY5QUUwMi9tRXllRjM0
dWF6ZmtvbUNySTB6bFItRE5tcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl
MBIEAgABMAwDBADLEQQDBADLEV8wDwQCAAIwCQMHACABDfAEITANBgkqhkiG9w0B
AQsFAAOCAQEApmjIv5wa7yKt4wzfUuhBBe+BqA8QX9EBu0ceemS2J87IYb1A4E1Q
JD4Y90hk0GfMpGyFVR3YShfj6z8+vT1aKBmpB8v31pZ91HobwKgz0NqMX9Uem4Fh
nbWG48AlBv1BT++fUfKgQJ9MvS4IFZyf9ocQZKuH2deM5zNJdWizFcwwJjm8SwrI
745K+IEp+hZBiZa4T/Ms8U6HS3wc5AkbBLKgkcGPAaU53ci2vqoAilbVnX5EKJM1
L9W+oFEMM898mOpzJd2Erad6QqfhBoHZj1Q1ljT36SOJmTbX5KvSRsvi0sAx7pWf
den0HRs3L+gwCslaEgM4Z4m4IthHItF7cA==
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:57 2024 by rpki-client on console-fra.rpki-client.org