Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.cer (raw, json)
Hash identifier: Up/QqKgGiWgm+oZmx47VZYbOtPat1ecICsm2Mh4LDgA=
Subject key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E9CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Apr 2024 14:36:49 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 17645
AS: 45794
AS: 55332
IP: 58.65.0.0/19
IP: 116.51.0.0/16
IP: 175.28.8.0/22
IP: 202.136.160.0/19
IP: 2402:2c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125389 (0x1e9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 4 14:36:49 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e3:7b:94:0e:be:7f:f9:24:d7:95:3a:3a:f5:
2c:68:af:34:e2:aa:c5:93:4f:5c:31:79:49:db:31:
4d:91:0a:58:1f:af:2b:40:2e:e9:4f:2d:6c:5b:e1:
b0:20:a9:39:23:e2:1c:98:11:dc:6b:76:dc:37:bb:
4d:96:67:97:90:63:65:a6:dd:87:34:09:81:c8:87:
f3:60:81:3c:f0:84:7f:a6:67:4c:3c:72:a2:aa:dd:
e1:2e:d2:cc:ce:54:4f:94:3e:cb:26:4a:ec:a8:31:
71:4e:b4:97:20:bf:02:cb:af:6a:70:1d:4d:28:ab:
d8:91:8b:3a:9f:6e:2c:14:7f:8c:00:64:00:55:31:
2c:35:34:42:0d:d3:d6:4d:b6:ce:c6:b0:15:51:ff:
3c:4c:13:af:a5:63:d2:91:1a:05:06:67:e6:93:08:
bc:df:07:f5:f5:18:d5:31:3c:37:6e:42:c5:ad:32:
34:0b:6c:fc:66:8e:c6:40:19:ba:f5:00:33:76:04:
bb:d6:db:31:31:62:49:88:73:d1:46:ad:75:bd:5d:
70:cc:fb:ad:e4:fb:8e:df:b3:ab:5d:28:07:04:19:
88:fc:58:40:6d:29:6c:17:73:78:67:7b:dc:98:61:
40:89:24:7e:35:15:0a:64:f2:c7:a4:46:07:3a:6e:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17645
45794
55332
sbgp-ipAddrBlock: critical
IPv4:
58.65.0.0/19
116.51.0.0/16
175.28.8.0/22
202.136.160.0/19
IPv6:
2402:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
50:06:1b:a2:fa:b3:65:83:08:bb:9d:42:a8:ea:ed:dc:83:76:
37:71:13:c7:76:6d:e9:20:6b:e2:56:71:c8:45:14:00:d0:68:
1a:39:bf:f4:a6:94:22:4b:63:99:7d:27:77:86:49:3c:5b:c4:
bf:70:6b:12:f7:aa:70:18:f0:1e:66:f7:cb:3d:65:3c:8f:d3:
8c:c3:4e:03:7d:7f:03:d7:5e:7c:63:0c:f9:50:45:92:ce:e7:
6a:2a:cc:54:48:a2:dc:ec:e1:86:3d:e1:76:81:83:8e:ba:d4:
32:33:0c:ac:b3:d5:1a:a3:e5:ce:a4:e0:db:62:5e:c7:e7:ef:
31:dd:3e:24:b3:a0:83:aa:b4:fc:2d:1d:36:1a:4e:ca:cb:07:
63:2a:d4:be:06:6d:8d:f3:43:98:f0:e9:76:39:a5:c7:a5:dd:
d3:88:32:15:18:4d:7b:c1:9a:73:91:d6:e6:68:85:4e:6a:d0:
d6:f7:c4:1e:32:30:b5:c7:3a:ef:f2:08:b4:19:b1:e9:d6:0d:
a8:88:8f:c9:6f:37:b9:9c:27:96:6a:89:c6:91:e4:a1:ef:41:
51:bb:dc:8a:8d:2d:d8:86:c7:57:bc:10:ba:30:d0:fd:de:3f:
cd:31:28:05:71:71:e3:17:4b:df:1e:f9:29:2d:75:fa:44:63:
c6:7a:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:30:55 2024 by rpki-client on console-ams.rpki-client.org