Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer
File: wrYFvbTytu0rBR3EKy6AP7YHjk0.cer (raw, json)
Hash identifier: jthTTuhNr/sGJkNA1UCgFy5pbeZM2qBIkZ59DHi2VJE=
Subject key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E8B6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Apr 2024 08:52:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56135
AS: 133452
IP: 43.250.68.0/22
IP: 101.234.72.0/22
IP: 103.29.192.0/22
IP: 2407:be00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125110 (0x1e8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 08:52:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:98:ba:db:f3:af:4b:8d:3d:6b:f8:af:b2:
f7:38:c1:75:94:f7:c9:b0:4f:d0:36:04:07:f7:d6:
5b:0e:37:08:4c:7d:90:41:78:7b:09:86:cd:54:dc:
f4:51:58:a9:8c:74:ab:30:04:11:f0:af:6a:22:81:
93:59:85:fb:b2:4b:56:f1:81:fc:b9:18:37:d0:42:
be:de:7d:44:09:77:e6:5f:5c:b1:43:9f:64:8e:f6:
d8:9e:eb:c8:61:90:cc:9a:28:b0:c3:a4:f9:8f:2d:
d7:e0:6c:09:8d:36:69:aa:4d:c0:c9:51:07:69:d4:
c2:3f:39:72:d9:ba:c2:4d:bb:f9:49:da:59:fb:68:
1c:87:16:b9:db:c4:d3:ee:71:4c:8e:71:2f:c5:2d:
a2:6c:8c:7f:ce:55:14:74:df:f7:44:8c:e9:83:aa:
de:90:84:a8:04:c0:9e:cc:95:5f:d2:1a:62:57:e0:
a7:e2:2c:7d:bd:01:0f:1d:08:73:7a:f7:4c:23:36:
4d:38:5e:e0:51:20:31:fd:61:72:74:c9:30:08:a5:
93:89:3a:74:6c:6b:b5:54:27:dc:ec:35:ea:13:5c:
a4:53:de:71:e9:d7:49:18:ca:12:ba:e8:4d:01:78:
47:45:9d:82:d8:fc:ca:23:bf:28:8d:76:96:36:89:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56135
133452
sbgp-ipAddrBlock: critical
IPv4:
43.250.68.0/22
101.234.72.0/22
103.29.192.0/22
IPv6:
2407:be00::/32
Signature Algorithm: sha256WithRSAEncryption
96:ee:93:57:9f:3e:df:4a:d9:dc:ec:d3:72:ad:ea:e6:23:ef:
12:0d:3e:b5:16:c0:93:da:57:eb:0e:ff:3e:1e:4f:28:51:98:
34:93:ce:4a:1a:35:e1:b5:05:ed:d0:f5:cc:b3:09:cc:35:f7:
f2:2c:56:06:58:8b:e1:04:d4:53:98:67:88:96:5f:56:d2:3f:
d4:8c:25:a0:f3:6f:0c:b4:90:d0:62:5c:8f:fd:e1:af:7f:38:
74:eb:e0:cc:0e:36:29:a4:b8:f5:40:d0:20:c2:60:3e:3b:a5:
d0:dd:b4:03:de:51:b7:d9:61:71:88:51:55:c7:48:76:c7:26:
fd:dc:bd:d0:62:78:89:dd:4a:3d:50:27:de:b5:03:cf:f7:58:
1b:f9:c0:e3:36:5a:e3:cd:23:29:aa:c1:94:b9:6c:92:5b:a9:
ad:8c:23:28:05:35:f6:e3:db:cc:6d:9d:a3:ea:9d:74:dc:9e:
9d:3a:f4:56:2d:18:f9:bd:56:59:c6:b0:ea:35:7d:b2:3a:9b:
fc:fb:af:40:c4:ea:8e:8a:c1:73:79:30:af:33:06:72:74:ab:
6f:35:bd:47:73:5d:83:0d:c0:e0:d1:50:b7:0b:00:43:5b:61:
38:bd:25:af:1d:c9:a4:36:74:e1:97:6a:aa:dc:25:d1:bb:5d:
1b:22:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:42 2024 by rpki-client on console-ams.rpki-client.org