Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
File: whEvRNRFjxhc25rZqRr4KQZInMY.cer (raw, json)
Hash identifier: uJOUCCJRPLTq6EtAUH/9eARC6WgJwOAEr9M0O0tKSa0=
Subject key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DD94
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Feb 2024 23:21:50 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 152462
IP: 2001:df3:6fc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122260 (0x1dd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 5 23:21:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:c1:3d:56:1e:86:ad:98:b9:91:aa:f1:f5:
2e:61:0c:3e:fb:cb:ec:6c:e3:a8:7d:6c:ec:79:08:
dc:5a:58:25:e1:7d:68:09:ac:05:ef:ac:8b:47:58:
c1:40:b4:e2:92:a8:62:a5:bf:7b:63:7b:a5:3a:70:
25:a3:46:48:7f:1c:e6:7e:44:59:00:31:39:38:6f:
7e:e4:75:b2:4b:ef:4b:fc:48:25:83:b1:a0:9a:48:
90:72:8c:5e:60:81:1a:39:cd:2d:03:45:41:b5:f7:
7f:8e:6f:9e:e6:74:fd:24:dd:6c:31:18:da:0a:b0:
27:ad:4c:f7:f8:b9:dc:2a:11:3c:f2:ca:01:54:0d:
e3:93:fa:24:7b:66:a9:2c:2a:c7:ab:c9:c5:74:79:
07:88:fe:84:e0:84:d8:35:0d:25:a0:6a:49:77:ef:
ba:f5:44:ff:13:1b:fc:a4:53:72:63:42:88:4b:ea:
18:f0:b8:1b:e7:46:12:a1:7e:f1:c6:6f:24:80:4f:
6e:ad:f8:62:8a:a8:59:b8:39:22:3c:14:7a:2f:d6:
b4:13:13:2d:56:a5:b0:c8:6b:4b:c1:2c:98:47:56:
9f:07:0a:45:a3:8f:a9:df:9d:31:0c:64:ea:94:f5:
4c:84:46:6a:35:1d:db:98:bc:42:bb:9e:dd:41:35:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152462
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:6fc0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:9d:fc:10:9f:14:4b:09:24:2f:52:c3:c3:de:ba:b5:0e:7f:
4b:e2:84:e8:07:8e:8c:e9:a6:99:8a:58:df:b1:b1:af:ee:15:
df:c2:39:27:0d:d7:a5:0e:99:b4:65:5a:40:12:60:c4:ff:12:
be:fc:87:8e:97:f2:95:08:4d:a4:be:9c:95:c2:66:fc:e2:60:
0a:f2:02:84:e3:75:05:9a:56:90:05:4e:58:93:e5:87:02:fe:
ec:76:25:c2:31:f0:49:6b:fd:7f:8b:24:64:c1:bf:10:96:96:
f5:9e:82:44:1d:4f:7a:21:6a:89:12:7d:b1:b4:1f:c5:af:54:
2b:34:de:1f:53:42:f7:76:5f:25:3e:4b:22:d9:83:b1:5a:08:
e4:70:f5:0a:f9:6c:0b:f4:62:6d:be:28:1d:25:ff:36:81:7f:
cb:13:08:05:05:6a:fe:02:b3:a0:4d:8c:b2:b3:83:b6:da:6a:
df:7c:de:4d:99:9d:8e:18:31:11:3d:c3:1d:ab:e9:af:cb:e9:
2d:d1:4b:be:b5:49:52:92:9e:fd:9f:12:18:dc:62:9c:c8:f7:
15:1c:23:13:c4:12:21:e9:8b:be:85:8b:d8:e4:37:6f:02:a5:
48:e3:2d:6d:db:7f:2b:60:65:b8:58:ec:99:34:95:8c:ea:57:
79:5a:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:48 2024 by rpki-client on console-fra.rpki-client.org