Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer
File: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer (raw, json)
Hash identifier: nHCtWcqRHaKAolUzYpXhBuUdMv97ly9OQ0VTwAEz0dU=
Subject key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02082D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Aug 2024 14:11:20 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 137496
IP: 2402:8dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133165 (0x2082d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 21 14:11:20 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:17:b7:6d:20:a7:9c:3b:7a:ec:7a:e0:0e:
f5:f6:ac:b8:c3:53:1d:f0:f6:e9:f0:d7:c6:36:96:
57:35:98:29:48:98:11:f7:9a:85:35:f1:e2:06:d7:
39:6f:65:39:05:bc:46:85:f7:09:ee:5c:b1:39:17:
fe:ee:72:d6:23:f9:63:b7:a7:b3:19:7e:c3:ff:02:
8e:0a:25:28:21:5d:b6:80:94:02:bb:4b:49:38:04:
f8:6a:31:6c:98:cb:33:dd:8c:43:f5:34:80:52:4b:
7a:d8:52:ae:d7:0d:0d:be:32:d0:d0:5e:31:da:7a:
79:c1:3f:53:a0:28:e7:35:7f:f1:9d:c0:0c:68:c2:
10:ae:f0:91:e9:20:f0:90:46:44:7d:44:b4:39:09:
65:24:ff:b0:79:5b:69:ea:8e:a8:6d:9b:58:28:1d:
f1:da:eb:fc:70:dd:5f:81:1a:c7:3f:b2:0c:ec:75:
e2:0c:65:00:97:71:07:d5:77:1f:bc:89:80:c0:6d:
f4:fd:0c:ae:86:ef:19:df:e8:5c:ee:12:42:e7:0c:
83:57:2a:eb:97:b4:e2:c6:05:a6:33:16:83:59:5e:
28:2f:73:7f:7c:ae:0d:27:7f:cc:30:18:c7:22:00:
58:33:b3:c9:e1:5b:fb:ed:4d:6d:ba:bc:72:03:af:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137496
sbgp-ipAddrBlock: critical
IPv6:
2402:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
00:e9:b4:00:7c:d2:66:6a:6d:91:5b:7d:ab:e2:d7:06:bd:5f:
0a:4b:16:c2:c0:49:64:f8:4e:22:00:2c:8b:4b:34:98:79:90:
3c:8f:6c:09:a5:98:fa:1e:c6:f9:a9:bd:b4:29:20:85:e2:8a:
ab:6e:70:f3:e9:7b:de:7f:b9:fa:32:32:f9:6a:14:73:74:51:
d8:33:28:3a:47:de:36:98:5d:0f:0d:f1:e3:de:65:f0:29:b6:
11:cf:c8:30:6b:1d:c2:f8:bc:26:1e:b2:23:7a:64:b4:cd:63:
db:a1:54:ac:4a:a7:64:fd:4e:c3:1e:2c:45:cd:85:fa:5c:38:
2f:22:9f:7e:0e:16:ee:2c:2b:2e:fb:01:c3:3e:c8:73:e6:6f:
9c:82:b2:95:2a:99:e7:f3:a5:43:53:c1:93:51:12:b6:1f:8e:
1c:01:c4:a2:75:fd:49:2f:ed:c7:5f:3b:82:7f:20:d2:1e:85:
e4:f3:e0:b2:da:47:da:86:c6:2b:ca:e1:47:ed:c9:62:79:7d:
a5:ee:51:cb:e0:a7:1e:5e:e9:53:90:c1:7e:cb:19:7e:70:d3:
f8:06:1b:d8:11:95:84:d9:63:b7:8b:89:bd:b3:53:df:2c:54:
17:1e:62:81:bc:cf:22:c4:32:88:ed:42:2a:f3:10:d5:37:85:
41:a2:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:13:02 2024 by rpki-client on console-fra.rpki-client.org