Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
File: tRdNgmVknN0nQmySfRaHddeD1Tg.cer (raw, json)
Hash identifier: bDFFbbsPaP2jH9p5bnqZrP2j5ptGqNTeB3pMWdlFBjM=
Subject key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E533
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Mar 2024 01:51:35 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 103.248.179.0/24
IP: 2001:df3:9140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124211 (0x1e533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 01:51:35 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:5c:76:2b:4c:3c:65:16:6b:9e:8f:0e:9c:
16:b3:ab:03:b4:0e:61:89:d8:1f:ba:b1:6c:3f:35:
bb:11:99:5e:0a:26:1b:1e:4c:34:64:65:f3:eb:b9:
36:98:00:f9:20:97:cc:c9:92:5d:a0:dc:17:78:ed:
4c:bb:86:61:92:c5:4f:92:04:09:c4:e3:e8:2c:15:
98:02:b9:6a:a3:51:9d:0f:7f:29:b1:c4:41:8d:61:
ef:c2:66:b2:4c:79:39:f6:ef:12:69:c5:2a:58:c8:
08:bb:d2:ac:59:b7:2a:1b:f3:3b:bc:14:9f:60:1a:
ca:44:42:20:db:cc:fb:c0:ea:81:21:2b:1e:6f:22:
3b:8f:91:14:bf:64:46:71:73:11:73:34:26:bb:04:
52:56:49:86:72:df:9f:e0:de:76:4c:79:ea:da:d0:
e0:b7:98:82:0f:90:80:ac:7e:2b:00:4a:c0:70:3f:
e2:8c:ea:4a:5e:a3:f4:d7:ba:45:71:7d:ce:1d:af:
45:e7:90:fc:91:7e:9d:77:11:07:2c:40:0b:b3:85:
06:47:2b:69:2f:eb:f0:ad:23:d2:07:a7:a7:90:92:
6a:6c:4f:48:0c:d2:eb:ad:c6:f0:fc:a9:6f:d3:e0:
87:f8:15:47:1b:33:5a:da:55:34:e7:98:af:7c:fd:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.179.0/24
IPv6:
2001:df3:9140::/48
Signature Algorithm: sha256WithRSAEncryption
89:d8:69:f9:f7:a3:6e:b0:61:2c:0e:73:70:af:26:d0:7b:15:
fb:1d:3a:22:e3:af:04:80:1a:a3:22:bd:9c:5a:c7:75:02:d5:
d9:ac:fb:7f:72:be:11:8c:e3:63:5f:a7:7b:10:e3:bc:3c:76:
60:d6:c3:98:8f:4e:d7:c8:6d:a6:03:48:64:7c:22:77:e2:cb:
e4:dc:ef:47:85:34:ac:1d:85:ba:bd:1e:83:7b:95:9a:15:f0:
5a:0f:78:48:4a:94:4f:20:7a:2c:d2:ce:51:29:4b:6c:a2:4b:
b5:09:0f:c9:39:5b:df:6f:85:e3:63:de:8e:d4:76:67:63:57:
0e:ca:6b:29:65:ed:8c:49:da:a6:e3:d4:d6:29:92:5b:00:96:
d9:9a:34:66:b8:16:a9:e0:b2:c0:7d:ff:28:a2:47:b8:61:b7:
60:2c:64:72:7e:2b:df:0d:2c:aa:c9:2b:c4:e2:12:f9:7c:79:
52:72:08:6a:3e:24:87:90:2f:64:84:df:96:4e:18:c4:b4:6f:
4f:93:0f:3f:bb:cd:75:42:0a:28:2b:a4:70:8e:48:f1:52:61:
7e:16:bf:69:32:04:32:dc:75:f9:3b:1a:cf:1a:6d:0d:b4:3c:
18:ce:a7:5f:cf:64:6a:f2:df:31:83:84:87:00:43:71:f7:26:
a7:38:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:19:08 2024 by rpki-client on console-fra.rpki-client.org