Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer
File: wtD9BoMuxNu3G5uxZbvylkCs72g.cer (raw, json)
Hash identifier: YelclwCrz/+EquOs6PU3+zNxKHASWD+VyhbCHbSMxBY=
Subject key identifier: C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E60F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Mar 2024 22:19:15 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 43.225.132.0/22
IP: 103.6.48.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124431 (0x1e60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 22 22:19:15 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:6e:da:1d:b6:60:07:7c:3b:09:e7:23:cb:
e0:7f:cc:b5:af:0f:eb:df:33:a9:c5:f5:97:7c:ee:
2d:8a:16:1d:62:ef:5d:4c:8a:f5:1f:5c:3d:a6:ce:
1c:dd:07:6c:ef:91:4f:bd:83:6d:48:5f:d8:5d:0c:
0d:31:bc:f8:13:cf:09:ed:1e:3d:4b:92:5b:a9:1c:
71:e5:2f:d6:63:8a:ee:7c:28:43:9b:ca:ee:3c:8e:
70:46:02:84:5e:5d:4b:bb:10:1f:ea:16:53:d5:b2:
9a:81:74:fa:b4:2d:a9:d3:5d:e9:d2:21:1b:96:f3:
a5:98:62:d0:58:09:e9:76:5d:c0:91:2f:48:5a:bb:
c4:24:8a:27:d8:fb:30:09:f5:cf:cf:8a:a4:0d:f7:
f1:dc:9e:1a:ec:a4:34:86:7c:9f:a2:42:c1:22:73:
a8:57:a2:ec:72:7e:6c:4b:8d:55:12:33:5c:9e:08:
4e:ef:fc:70:57:3f:58:f8:38:89:e4:b4:fd:a8:51:
74:94:58:27:e4:49:5f:49:61:c3:4f:29:5a:0e:94:
c6:00:f2:95:aa:0a:d0:b1:00:02:22:12:f3:76:c7:
92:f4:ad:57:39:e6:72:0a:b9:b4:0a:58:0a:6a:e7:
7d:58:38:79:5c:8e:14:4f:ac:b5:2c:52:c2:cf:39:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.132.0/22
103.6.48.0/22
Signature Algorithm: sha256WithRSAEncryption
18:14:66:65:ef:74:3c:43:8a:ee:69:2a:37:da:aa:b9:54:61:
de:01:7d:e6:5e:53:3c:23:20:8d:b8:b6:15:4c:73:58:79:f0:
e8:b2:f7:9e:c9:d0:51:4c:00:dc:fe:7b:9c:05:f8:ef:f5:25:
cc:cb:d2:0a:5f:1f:66:89:12:87:97:a0:8f:2b:bf:89:88:47:
71:ab:b0:2f:e9:7d:02:4d:f6:11:2d:91:de:55:74:f1:33:d6:
e8:f7:81:7e:41:42:ea:b0:5c:6c:8c:12:70:a1:e5:ae:74:ea:
b6:52:aa:9a:65:01:a3:4d:c5:7a:6b:5a:f0:7b:96:05:2b:35:
b4:c1:da:11:e5:ba:4d:d3:4c:e0:45:f7:a3:f2:28:35:fd:4c:
a7:f9:0d:63:b6:3f:57:78:f3:0e:ee:bb:7a:3a:c2:5a:37:b6:
44:8e:e3:75:48:b6:07:b6:02:8a:bd:0a:20:41:d5:cf:87:73:
e9:de:04:85:3b:9f:d8:af:d5:13:67:45:0f:7d:3b:b0:d6:cb:
31:3c:43:f2:4b:ad:8a:71:c4:df:1b:90:5a:7c:d8:b3:3d:10:
6e:39:ed:e6:da:32:32:2d:ba:4c:3a:24:41:56:71:cb:2b:3b:
94:c3:e2:ad:fb:e8:55:60:d6:99:6e:8c:8f:9a:a0:ec:77:47:
2c:00:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:25:10 2024 by rpki-client on console-fra.rpki-client.org