Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer (raw, json)
Hash identifier: 5qUxmHwD7wg7M+bbYJRX5hFhKV9rwo5+/F2cWJH3BwM=
Subject key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C185
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Oct 2023 18:55:58 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 45.119.204.0/22
IP: 103.5.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115077 (0x1c185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 18:55:58 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:b2:03:bd:da:e0:bf:91:8f:6c:01:18:b1:
f8:26:25:09:b7:ac:fe:66:2c:72:a5:b0:99:6c:0a:
a0:33:c0:04:d4:af:dc:d8:40:0a:41:db:60:ee:d7:
8d:82:94:df:8a:69:df:76:e3:69:07:70:5a:19:6a:
a6:8d:0d:02:6b:e6:c9:2d:00:16:a1:cd:a6:3c:a6:
df:b1:ae:ea:cb:9c:3a:b1:91:cd:b9:56:76:a8:d4:
84:aa:f8:cf:e7:1f:89:ce:98:d8:3a:c9:61:08:11:
b0:02:2b:e1:22:ee:d0:5f:f9:ae:08:2c:e3:83:8e:
e0:d0:64:6b:8a:64:20:1a:bf:1a:c5:aa:e1:02:0c:
9d:7e:7f:58:d4:96:92:d4:71:3e:02:02:c4:70:42:
62:2a:ff:3b:e7:2c:78:fa:3f:7d:cf:43:e0:46:ec:
cc:e3:f3:23:bc:3d:ae:5d:ce:ae:67:60:23:fc:13:
2d:4a:e7:2d:76:6e:e0:4c:7d:4e:7f:e7:ab:3a:30:
65:05:fc:e2:12:26:9c:22:4d:94:33:bf:3d:18:d0:
3e:b9:ba:1d:17:f5:57:d7:45:c2:4c:9e:01:a9:cd:
c9:33:50:13:53:c4:20:e6:d8:4d:a1:45:6a:5f:9e:
b1:dd:0f:da:68:52:8b:36:3b:31:65:ef:8d:eb:a1:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.204.0/22
103.5.160.0/22
Signature Algorithm: sha256WithRSAEncryption
86:5c:ac:e9:92:5f:f8:c5:07:8f:48:76:76:57:13:47:fc:06:
9a:dc:e9:22:c9:45:e8:9d:e7:eb:e6:33:f0:cb:8e:e5:6f:13:
97:c1:d3:24:f9:aa:37:c1:fd:9c:b6:91:ad:f9:f9:71:ef:7b:
ce:96:3d:3c:45:35:75:6b:fa:2f:b4:39:26:23:a6:f4:4b:e1:
a6:14:a5:72:af:33:74:2b:64:7f:a8:a3:00:70:d0:2c:cd:3a:
79:2a:5a:44:5c:81:d5:2f:84:5b:64:df:3e:a8:8f:3e:ed:0b:
78:35:0d:62:b5:64:79:67:f6:3a:98:c7:a6:23:01:ee:ba:28:
e3:66:e0:34:7d:60:10:45:77:a3:f7:15:da:2e:4e:2d:6c:f4:
6f:c6:8d:17:bd:ae:93:d4:2e:42:d3:fc:59:74:f2:8d:aa:9f:
5a:4c:44:83:19:ca:29:43:c5:6f:88:c7:87:d4:1c:2f:de:a2:
7d:ef:85:87:dd:4a:3e:59:51:db:f5:c4:e7:f8:1e:1c:35:53:
d3:3b:0b:ea:00:0c:3f:c0:53:94:e9:99:97:f3:a2:bc:10:43:
f7:9e:fa:ee:12:8c:33:6c:76:9f:09:70:e3:50:72:90:97:7a:
fe:40:ba:04:4c:30:70:ca:1e:c3:ff:aa:ca:a7:e4:3c:1d:bd:
ed:1e:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:15 2024 by rpki-client on console-ams.rpki-client.org