Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer (raw, json)
Hash identifier: 71Wy+PAY/xasJUWVnWDOE8xlHaudQ9CppM6HWU9kURw=
Subject key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FA5F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Jun 2024 04:51:34 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 152913
IP: 2401:a660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129631 (0x1fa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 04:51:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:51:ab:66:3f:eb:5f:cc:8d:4c:c3:bc:73:
8f:4b:6b:c4:e5:84:e2:7e:fb:5f:c3:e5:a2:c9:d2:
76:0e:97:c2:47:d2:6e:38:08:51:89:0e:38:18:ff:
2a:28:d4:4c:a0:23:04:ec:24:94:66:fa:fb:0d:b3:
2d:aa:c4:db:f7:54:a0:01:24:13:5a:93:49:81:ae:
ac:c7:67:ab:0c:54:e1:eb:5c:1c:19:47:fb:a8:57:
99:d4:48:9c:e0:97:95:fb:dc:0d:f3:30:39:38:48:
2b:0f:a4:cd:d7:93:54:1f:8d:21:d3:9b:a7:89:eb:
4f:ae:c8:33:7e:c5:ab:f6:d6:5c:24:82:d8:e8:24:
62:8e:b6:0e:23:dd:14:1c:58:82:ca:c3:6c:d8:09:
75:a1:d6:18:fe:16:0c:3f:99:c0:1f:7a:51:31:b6:
92:9b:5d:5f:c2:ce:5a:22:76:4a:3c:5f:18:c0:b1:
73:93:8f:ad:9a:2f:b6:90:ac:67:c3:9a:bb:a5:a7:
c3:2e:70:4a:a2:48:12:f9:d2:e4:7d:59:f2:cd:b9:
b2:41:6e:d1:05:15:c6:13:44:b0:36:2a:92:0c:56:
11:e8:88:d4:73:da:46:1f:b8:7c:cc:59:cb:88:40:
9c:ee:35:dc:70:9c:56:f4:25:87:d7:8a:6f:20:f1:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152913
sbgp-ipAddrBlock: critical
IPv6:
2401:a660::/32
Signature Algorithm: sha256WithRSAEncryption
5f:75:c5:41:3f:c4:d0:b0:88:f5:89:7a:6d:03:29:a5:3e:4b:
16:92:ad:f9:19:94:90:56:bb:f8:72:4a:4f:73:f7:ee:e8:2c:
e4:25:ef:d1:22:c0:a9:15:5d:55:de:04:0b:61:eb:58:3d:7d:
67:42:d7:ae:e6:56:61:f6:5d:39:f7:76:c5:5e:a7:be:9a:d6:
e6:74:fd:65:5e:0c:a0:9a:c5:cb:a9:57:b7:27:31:24:72:1c:
94:56:89:b2:43:cc:0b:40:c4:8f:6d:8b:23:b8:70:cf:1a:27:
8c:70:f1:64:e7:ce:50:af:de:ab:89:e6:2e:49:4f:8c:89:1d:
84:7e:12:b4:09:76:2b:9f:00:cf:b8:89:3f:31:94:ef:a7:59:
62:10:ac:ba:fa:7f:35:b3:31:b5:0d:d2:7d:0a:f5:ae:72:6b:
d7:84:97:ac:b8:82:1a:d9:9e:ce:84:34:da:39:e7:4f:aa:01:
65:c3:e9:f9:e8:fc:98:df:88:ca:80:e8:05:1e:99:75:e5:b0:
fe:3f:34:bc:54:97:8b:26:52:e0:ac:30:6c:ac:cb:91:68:89:
08:a2:49:27:ee:b8:62:1a:f9:8f:89:54:7e:f4:fd:e4:dc:c3:
84:6c:80:02:01:ca:6d:cf:b9:c9:f9:2d:15:33:1a:dd:b1:08:
6d:34:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:08:15 2024 by rpki-client on console-ams.rpki-client.org