Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer
File: rbkheCH_vuCW4c7EcJijFFokbqA.cer (raw, json)
Hash identifier: 3Yv02F5zcsfNlPMmRt0rHp4JY/3BrfrAEnNRApK2Xu4=
Subject key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A14B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 May 2023 23:09:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.110.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106827 (0x1a14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 3 23:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:d1:95:54:62:bc:ee:83:2f:65:22:c8:32:
c4:23:f5:8b:af:ee:03:22:31:4a:09:2d:e9:a9:a9:
57:a2:ec:07:07:8f:d9:77:c9:48:c8:88:1d:75:35:
ab:8b:f4:d4:17:cd:ab:eb:52:40:ed:98:ba:0b:eb:
1b:b6:23:43:cc:21:5b:0f:81:e5:11:3e:22:7a:f4:
db:d8:c1:a4:88:3d:b2:54:e3:fc:5e:8b:00:23:f1:
8f:6d:59:1d:ed:56:74:c1:5c:3f:6b:44:d1:8b:0b:
22:00:67:d3:cb:e5:cc:4a:aa:1f:27:42:13:5f:dd:
9f:5e:21:c3:ce:62:a9:23:57:8c:97:42:3a:c4:01:
fb:f5:7d:5e:cc:d2:78:78:02:1c:1e:d4:c8:53:4f:
c4:4c:60:38:5d:a4:0c:ff:20:f9:f6:6f:50:93:e4:
58:8a:b1:ba:f9:23:85:03:59:50:bb:9b:df:6e:41:
13:ff:cf:5e:58:48:47:01:c1:b7:2b:46:02:1a:1d:
b9:7e:f0:28:4a:a1:da:87:fe:75:24:99:d6:80:33:
3b:bf:0b:79:db:72:f9:38:bf:9c:69:cb:71:0a:01:
f9:46:e4:dc:1b:65:4e:d9:3a:b8:2d:c2:bf:6f:36:
2c:2d:ce:24:75:48:f1:72:85:88:5e:16:d2:ae:ee:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:00:80:2d:07:a0:bc:cf:88:22:3a:ef:12:86:5b:a2:76:94:
35:45:03:40:95:e5:41:a9:41:d8:3c:cb:1f:c6:28:00:58:94:
2f:a3:52:7a:e6:a0:0b:7c:fb:c3:09:16:49:b4:5e:0b:f5:68:
30:62:be:3a:5a:68:1b:cb:83:62:b6:0d:0a:76:0b:00:c4:49:
a6:c8:57:b4:94:29:31:06:39:b1:30:e4:36:41:6a:40:fd:c0:
3d:86:78:1d:49:5f:d1:96:20:8e:b3:01:d6:3d:65:10:66:34:
35:12:94:92:f6:53:bf:e6:cf:15:4a:2c:01:db:c0:61:45:25:
b4:81:69:7e:ec:52:50:24:18:61:fe:aa:f9:68:9d:e7:32:07:
64:e3:af:f2:eb:2f:71:9f:b0:46:d8:4a:7e:05:f4:82:4b:41:
a5:8f:34:77:fe:9f:46:65:96:9b:10:95:92:6e:9c:f5:0f:a2:
3c:50:8e:46:5d:ab:0e:81:37:33:f2:15:9d:ba:54:78:c5:1b:
0c:82:72:4d:ce:17:aa:ca:db:1b:32:e4:4a:c5:73:c2:26:3b:
80:52:e4:8f:7d:fd:95:09:cd:4b:a7:65:dc:8a:64:6a:84:2c:
2b:cf:23:3e:d6:8b:c2:53:4c:b6:52:47:22:fc:77:eb:35:30:
b1:87:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:06 2024 by rpki-client on console-fra.rpki-client.org