Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
File: sejBHBQOD6dR6L-mWlnHFd1-HFM.cer (raw, json)
Hash identifier: supKWkI32S+hZvm6WZYRG2GX30R2xgA3yqXr8UbynD8=
Subject key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F45D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 May 2024 02:03:00 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 9338
IP: 202.12.91.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128093 (0x1f45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 02:03:00 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:c7:b4:08:ea:91:a2:e3:e5:93:f1:c5:e0:
1e:52:33:eb:f9:ce:4f:2b:03:ae:79:0e:48:fd:c0:
14:d4:d7:14:ae:8c:49:c9:70:7e:05:d8:7c:ba:0b:
57:90:3b:29:f4:04:69:56:63:c3:79:15:41:99:28:
76:b4:9f:b1:08:c4:c7:71:7c:bf:51:28:4d:2e:25:
3b:59:79:26:fe:48:ea:9e:c2:92:19:38:4f:79:ed:
14:b1:53:76:5e:1f:c2:1f:34:08:82:af:71:c0:eb:
c4:cc:5f:a2:e2:17:0c:12:eb:c2:b6:f3:c6:96:f9:
62:8a:87:3f:4b:9a:b2:e0:b7:7a:0c:d1:2a:a0:d2:
0d:e7:0c:d6:09:10:36:ac:d4:80:2d:9a:e3:af:01:
38:cf:03:b0:1b:7f:7b:dd:4b:54:2c:09:4f:90:65:
49:0e:59:5e:89:91:04:d3:d6:51:68:66:1f:20:25:
30:99:c1:c6:c1:66:f8:c7:fb:c2:91:31:51:e2:b9:
76:2c:79:8c:c2:9c:3f:c5:4c:0c:33:0e:ce:69:01:
9d:96:23:26:86:5c:4a:b0:5a:6f:e2:6b:00:fe:2d:
50:bd:89:87:b0:05:f0:52:c7:b1:b0:15:5d:31:57:
e3:b3:56:ef:26:97:8e:6d:5a:dd:a4:de:2b:f8:dc:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9338
sbgp-ipAddrBlock: critical
IPv4:
202.12.91.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:09:4c:8b:c3:09:34:12:27:a6:bb:87:3b:fd:50:00:c8:da:
46:24:68:84:e8:d4:8b:04:cb:bb:b9:a2:8d:52:df:d4:b7:8a:
cd:38:5b:32:24:6d:53:3b:14:2a:71:e6:9e:95:19:17:87:de:
b2:68:89:c9:5a:56:b1:1a:e5:f1:49:c6:11:49:4b:fe:e7:e8:
c7:18:03:ba:23:d0:4d:7a:f6:ee:01:2e:71:5d:81:c4:72:d8:
44:c8:3d:ec:fe:c5:3f:d1:3b:fa:68:c3:55:5f:b6:d4:98:88:
92:38:27:09:9e:a2:58:13:9c:ac:14:e8:e1:86:c3:b6:74:21:
c3:e7:67:67:69:35:0f:71:92:25:03:87:4f:7c:63:e5:dc:97:
90:cd:0d:ae:78:69:f4:08:06:bb:82:4e:74:f7:a8:ac:4a:24:
18:d3:fd:f9:23:dd:f0:2a:ef:b8:f2:a1:3c:89:d6:66:64:89:
75:0d:15:d2:67:4c:eb:f4:8a:9a:75:ae:09:27:b1:53:96:f4:
83:11:e8:b2:be:eb:bf:77:01:6c:1e:77:54:59:a6:a0:d7:5d:
64:50:10:b7:1c:c0:ab:3b:ca:a3:77:29:3c:6c:97:67:bf:6b:
ed:bd:83:37:d3:9b:11:1b:4b:05:8a:c3:4a:38:f7:88:07:24:
8e:9a:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:13:03 2024 by rpki-client on console-fra.rpki-client.org