Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer (raw, json)
Hash identifier: 0PncdKcCAyoEJ6PqnU/ggyfNo41DrSdbzGE8WxECh9g=
Subject key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E747
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Mar 2024 16:46:43 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.106.248.0/22
IP: 2001:df3:b900::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124743 (0x1e747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 29 16:46:43 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:e2:bd:8c:4f:6c:4f:a8:6e:be:e2:43:6e:
e6:1f:6a:81:25:62:13:04:ab:0f:0d:79:28:ac:50:
50:12:54:c2:b0:b1:b3:6c:48:68:bd:14:6d:77:fa:
90:32:36:0e:f3:0f:c7:7a:e5:6c:f8:c8:24:d8:e7:
fa:8b:96:d9:2a:ae:50:1b:75:ad:12:78:5a:bf:d0:
15:71:59:7a:6a:71:07:36:17:74:5c:0a:c8:cb:da:
2e:4b:92:a5:99:a8:37:04:0a:30:6f:af:a3:73:45:
6e:77:94:35:8e:1d:b9:b8:3b:50:46:48:8e:f8:be:
41:e5:20:d3:18:e2:f0:ab:1f:15:07:2a:39:b7:af:
c9:f1:81:fc:35:dd:25:ba:c2:0e:14:c0:4b:05:0d:
ac:df:10:29:83:e0:a7:64:a7:e7:ea:52:74:d9:67:
1f:1c:bd:61:1d:b3:0e:7b:0b:08:f5:52:57:4a:03:
7d:57:9d:bc:a2:0e:6b:4f:f7:ad:72:93:e1:d5:88:
4c:9c:f6:da:f3:18:c1:38:15:ae:d2:73:3f:2e:57:
29:42:8e:19:91:49:cc:19:9c:a5:6d:eb:3f:e5:44:
e7:23:c3:87:41:f6:15:ae:15:4d:5c:4d:b7:d6:ec:
a9:f0:04:e3:7b:68:e0:00:91:e0:2a:3d:24:5f:2d:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.248.0/22
IPv6:
2001:df3:b900::/48
Signature Algorithm: sha256WithRSAEncryption
92:bf:f9:8c:23:54:a9:d6:d0:29:cc:99:68:b5:c5:c8:a1:50:
46:f6:7c:0d:87:33:bf:54:7d:da:c9:f4:1a:c7:5c:48:1a:65:
1e:60:be:40:d7:da:39:13:dc:4d:32:2c:20:1c:93:c3:46:61:
79:5b:a0:3c:de:50:be:37:59:99:b8:97:3d:fc:3f:3d:2a:1a:
a9:41:7b:8a:c5:6f:2c:67:32:b4:a1:f0:47:1f:2a:91:94:d4:
fa:15:f8:0f:73:ce:8a:a9:f9:d4:d0:b1:30:cd:8f:17:53:5a:
a3:46:de:3f:2a:f6:d1:b8:15:e1:31:3e:23:e6:aa:61:0e:b7:
b6:d4:90:ef:03:d6:86:61:07:dd:96:d4:3c:4b:85:7e:0e:30:
93:85:8e:63:55:dd:be:62:47:06:18:eb:55:0a:d1:c2:ce:af:
c0:09:5f:d4:ba:ca:01:0a:5f:ff:a4:e5:83:3a:49:a2:79:c8:
83:a3:dd:c9:10:c6:5c:90:f6:c7:87:a9:a9:74:fc:2e:a7:e4:
34:5e:2b:57:5e:63:d3:53:54:b9:c7:9e:5d:e9:76:7d:13:78:
34:73:d4:9d:21:13:c3:de:78:e9:ae:21:13:7e:e9:e2:2d:a6:
c2:6b:e3:8d:74:8c:28:a1:3d:0f:1f:72:88:70:51:c9:69:6a:
95:ec:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:24 2024 by rpki-client on console-ams.rpki-client.org