Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.cer (raw, json)
Hash identifier: nMTzzzusqypjSv2BrrsWx7tXNngUBCVUcdYFHrsYYts=
Subject key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020114
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Jul 2024 04:21:38 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 153169
IP: 2001:df4:13c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131348 (0x20114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 18 04:21:38 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:66:30:40:f1:6d:87:46:90:ee:ea:f1:63:
71:13:2d:f0:a1:2d:69:ce:9b:0f:f5:84:60:23:7e:
67:2c:48:74:39:2a:e7:af:92:91:c9:d2:cf:fa:50:
13:c8:0a:00:b3:3b:73:77:59:d2:2b:84:26:75:d4:
a8:41:cb:9e:a8:8d:d0:70:45:48:7a:61:d0:56:3c:
28:35:c9:5c:68:6c:7c:f1:70:d3:55:6c:e1:3b:27:
0c:6a:18:8d:5e:17:e0:bc:83:da:46:f2:98:33:86:
cb:ce:e1:dc:bc:e8:26:16:93:d2:eb:51:69:e6:98:
97:24:f4:90:7a:87:f7:4f:5d:da:85:42:26:d8:b7:
84:31:20:6c:16:8a:31:34:74:43:81:08:d1:3f:7a:
d3:95:34:93:ab:3b:0e:bf:69:3e:f5:e3:dc:52:1a:
84:14:aa:9a:82:b4:66:33:c0:47:37:0b:b8:6f:56:
fb:05:aa:97:05:ac:c4:94:50:a9:cd:40:93:cd:d0:
0d:96:b1:4e:cc:09:31:8c:9a:54:62:2b:e4:93:7f:
6e:01:4b:77:20:bd:6f:50:e1:e5:d2:55:75:5e:95:
8a:61:ef:77:cf:ea:44:de:c7:b1:38:5b:01:8f:64:
18:36:b6:c2:92:82:22:2a:86:3a:be:c2:58:a3:80:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153169
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:13c0::/48
Signature Algorithm: sha256WithRSAEncryption
21:40:4b:88:06:45:88:7b:78:09:5f:65:a0:d8:04:e6:b4:f8:
7a:0d:70:d8:99:ea:36:d7:37:e8:ad:2e:2b:6f:7a:39:08:66:
3f:b2:c1:87:ce:be:8b:a6:e6:41:02:d0:3d:41:00:4d:dc:bf:
e6:f2:ea:27:ab:1e:f1:3c:3d:17:64:89:4c:a1:f6:8f:d1:27:
a9:c2:b4:e3:95:e2:ae:04:47:cc:54:b4:ab:d1:2f:4a:cd:e8:
1e:1c:03:d4:f9:11:28:80:70:d7:65:98:63:ed:32:17:38:85:
ba:45:37:52:43:55:d0:ed:5c:46:5f:e9:bb:1b:ae:b7:25:13:
66:42:3a:81:5f:ae:fc:6f:42:fe:82:eb:5a:f8:80:ff:44:3c:
e1:42:8e:e2:10:30:43:af:e4:80:5d:c5:73:6e:4f:6d:63:60:
db:ae:19:d7:a7:2c:63:01:d4:74:2f:bd:e7:86:b5:7d:fc:6e:
56:32:fc:d5:50:e6:5f:a7:d6:5e:78:80:43:9a:6c:8f:c9:f7:
74:22:5a:db:ea:92:1d:ce:dd:12:72:18:5e:81:63:bd:20:92:
0a:4a:b6:b5:19:bc:fa:50:97:c8:de:12:61:d1:f5:a7:de:af:
04:df:4c:1f:54:50:65:8c:6f:65:5a:ec:87:5d:2a:01:9c:94:
84:72:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:42:13 2024 by rpki-client on console-ams.rpki-client.org