Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
File: nePaegrGlA0yq7nP_LBh8q7lZh0.cer (raw, json)
Hash identifier: Bk1sfQpbOIeFy4ine2hiJmVVwcNUI29HUaiyycpSPZo=
Subject key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E914
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Apr 2024 21:35:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.113.0.0/22
IP: 103.52.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125204 (0x1e914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 21:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:1a:61:1b:ba:8a:5e:8b:c1:f8:94:48:80:
52:f1:a5:86:44:34:e2:21:41:89:46:61:aa:99:01:
d4:3c:20:88:d9:98:d0:5a:db:24:09:55:4a:da:c9:
88:06:67:c5:dd:63:8e:97:ee:4e:0b:db:fe:a0:4b:
8e:03:c5:db:f9:c0:70:f7:c0:3b:af:3a:df:fd:fc:
8c:ed:d1:fd:28:12:36:87:01:96:a5:a2:aa:b1:ca:
0d:50:84:3b:4c:ac:25:5d:96:a9:59:b4:d9:e8:84:
ad:47:b6:0a:d7:75:ae:de:7c:c5:81:8f:14:02:44:
03:ee:c6:61:d6:ec:9d:c4:ed:3c:e5:2f:ab:a5:71:
74:19:c6:f9:77:79:02:a7:cc:c7:90:c6:f2:3d:5a:
76:17:12:2b:2a:46:34:ea:ce:87:3e:46:a1:6f:b8:
b0:6d:bf:4f:d5:7b:ae:11:3f:f5:80:54:ec:ef:2e:
24:0f:8c:e3:fa:49:cd:44:1c:a4:4b:f6:35:d9:07:
51:88:bb:fb:82:d0:c6:b4:49:85:59:81:e3:b5:57:
67:17:a5:73:aa:4a:95:14:a4:80:d8:d7:8f:ef:44:
04:0c:08:3b:1e:4c:83:fa:79:80:cf:06:49:90:84:
b0:57:5b:96:bc:fa:be:b7:d7:2d:b5:0e:02:97:5a:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.0.0/22
103.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
34:2a:9d:16:26:4d:d9:70:cf:1d:60:54:61:be:3b:13:1c:68:
01:7d:2f:4f:fb:c8:81:cc:6d:2e:5d:ad:fc:ae:8e:3c:05:08:
e0:6e:c6:a9:d5:f1:55:96:ba:08:e7:dd:74:97:ed:9b:b0:48:
34:bf:80:89:4c:9f:b5:47:cb:55:eb:66:8d:47:44:9c:3a:30:
1e:4a:93:5f:74:73:1d:33:0f:8a:33:4c:3c:9f:7a:d5:36:c5:
08:16:2b:44:f7:3a:a1:6a:d9:f7:9e:1c:dc:01:bd:5c:ed:e1:
18:46:a7:61:2d:6a:9d:3d:c0:61:f7:0c:57:db:3c:8b:c7:39:
ac:4f:bf:e2:06:55:d1:04:ba:1f:20:7f:b5:2d:22:ee:7a:1d:
ee:70:8e:18:ae:ce:c0:94:c3:ee:46:46:ab:06:05:25:96:11:
af:42:b5:4f:c7:0e:d0:fc:02:89:05:88:33:98:32:9b:f3:6f:
a3:8f:26:5c:8e:e3:37:70:ae:d3:ea:f3:73:00:85:bd:60:4b:
4b:e2:cf:5e:81:b2:c6:29:1b:96:53:7d:81:50:7c:ed:42:41:
f3:ee:33:f0:d1:ea:ac:b2:16:88:ab:a4:4d:34:40:bb:a4:b4:
cd:ac:e9:71:18:96:af:c6:12:4a:9c:1b:09:61:0f:b1:5b:d3:
e3:b3:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:18:56 2024 by rpki-client on console-ams.rpki-client.org