Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
File: n6yKuWoNopKfw9GHG-1vdD6MlXc.cer (raw, json)
Hash identifier: TJhZGySPs5f99/CtNqbpieMp/2ljMntyHIK/HdnC2+M=
Subject key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EAFE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Apr 2024 16:46:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 149634
IP: 45.114.160.0/22
IP: 103.54.112.0/22
IP: 103.183.64.0/23
IP: 2400:6060::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 17:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125694 (0x1eafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 16:46:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:5d:8c:b6:f1:6f:b6:a2:eb:11:c3:bd:ca:
04:6f:00:fc:6f:89:08:bf:a4:d0:d6:06:be:f7:cc:
bb:a6:2d:b7:63:af:63:06:66:1c:da:39:9e:de:70:
16:9d:b1:04:a6:dd:18:e3:64:08:27:cd:20:c3:10:
e1:ab:44:38:00:d5:cb:21:7f:05:a3:58:e4:91:91:
e9:2c:fe:50:b5:2b:06:99:3d:e7:b3:ac:cf:28:8a:
0b:42:86:c5:55:01:98:4d:7e:98:94:b6:d0:da:78:
82:d4:25:2e:b7:41:1b:52:77:c5:1d:e9:b6:7c:60:
fb:a6:6d:ca:35:0c:f6:2d:39:a1:52:77:d9:dc:e3:
e3:fc:b4:cf:66:3c:a7:88:68:97:db:b0:0e:4a:cb:
ea:a0:6a:5c:f8:2a:fb:b4:18:1f:b9:16:31:dc:6f:
fa:1b:e3:ad:0b:c1:93:b8:f9:bd:45:11:b7:d8:fa:
19:dd:07:7d:5a:91:a6:64:b9:fb:f4:ba:4d:cc:a4:
63:ca:73:ad:ac:06:6c:af:19:9e:d3:c7:d0:24:34:
38:37:0c:f2:3e:58:9d:9c:a2:57:69:55:42:2f:f9:
e0:a0:e8:2b:7d:e0:a9:9b:90:c4:f8:fc:c7:de:3b:
71:4d:0c:53:7b:a2:33:6c:d7:0d:0f:93:bb:b3:a9:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149634
sbgp-ipAddrBlock: critical
IPv4:
45.114.160.0/22
103.54.112.0/22
103.183.64.0/23
IPv6:
2400:6060::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b5:c3:58:69:1f:50:88:e3:04:62:a0:81:d4:59:72:6f:91:
e0:df:a5:63:4d:bf:2e:60:9a:eb:07:f1:49:8a:ca:d0:18:d1:
06:0d:24:b3:44:b3:fe:ae:73:ee:80:f2:b6:a8:91:6d:f1:8f:
aa:36:05:d0:10:56:d5:30:b4:21:9f:de:27:01:0b:c7:24:82:
90:b0:20:64:4e:6f:56:55:4c:6b:89:6e:6a:59:d0:cd:bc:fa:
f1:4f:25:64:29:0e:a2:b5:6a:74:ca:3e:f3:4b:46:64:44:9c:
fa:19:3a:5c:5f:c1:bf:f3:f1:0d:81:b9:c5:a2:40:00:4c:3c:
0f:f1:0a:fb:1c:cd:39:ad:c5:19:ec:97:36:70:1a:f3:64:64:
30:ff:f3:a9:cf:5a:a1:fc:a8:7c:38:b8:a7:3b:83:42:be:c8:
10:7c:9c:3c:bc:0c:f6:a7:67:03:1b:e2:54:81:98:7a:5e:48:
ff:20:81:6c:d0:0a:4e:45:d0:3c:04:dd:8b:b4:c4:b1:70:1f:
ec:f1:6a:b8:94:25:22:b8:1c:aa:f7:45:87:2d:a2:09:4e:f1:
ea:0e:e2:ac:cd:f3:da:fc:36:60:d5:83:6d:8b:1a:91:fb:58:
f1:65:03:c2:f2:08:4a:aa:c3:13:a8:4d:60:3b:20:ba:fe:4a:
ae:00:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:17:29 2024 by rpki-client on console-ams.rpki-client.org