Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.cer (raw, json)
Hash identifier: 1Vg2YhRG8lWkm6nAm1P3/hWDnfB8dFyUxSZqwA0zPEE=
Subject key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E14E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Feb 2024 21:09:57 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.207.68.0/22
IP: 210.16.120.0/22
IP: 2404:2a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 05:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123214 (0x1e14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 21:09:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:b5:8d:7f:b8:0e:21:3f:a3:64:b9:92:65:
b8:a7:62:7d:89:98:e7:dc:3c:e7:68:ec:5f:cb:f0:
1c:44:6e:1b:eb:75:33:47:2f:1d:72:f8:d8:ff:24:
6f:2d:fa:cb:dc:70:e1:d8:ba:00:99:03:56:ce:4e:
7c:da:80:95:88:77:8a:a4:e3:d6:e8:49:d0:6e:72:
18:38:3c:0d:c6:cd:b8:e4:bd:38:9e:22:a7:e2:ed:
5a:d5:0d:63:01:18:d8:d6:11:b6:a3:ff:87:12:58:
c1:7a:37:9d:5b:f0:19:30:77:b3:4f:33:ff:d6:7a:
af:69:2b:9c:c2:f7:a8:0e:7f:6a:80:2f:68:12:e5:
ae:a6:49:79:e4:41:a2:ae:83:ed:e3:27:d8:8d:67:
b8:09:ef:12:19:ae:bb:6d:97:fa:4c:fe:31:5a:89:
a2:b3:03:f0:33:a4:4e:49:74:7f:d6:0b:91:ec:3d:
12:51:85:e7:9a:c8:bf:7e:4d:5e:13:4c:b6:07:19:
ff:84:99:08:64:ca:78:98:50:c3:74:8b:46:3b:ad:
59:a0:dc:32:50:6e:04:71:cf:e6:ce:56:4d:da:34:
b4:0d:d2:65:f4:36:fe:6a:8f:11:95:99:aa:9c:70:
0a:70:02:d7:8d:54:52:4f:fb:fb:19:32:37:e5:b1:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/22
IPv6:
2404:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
af:a2:b3:f0:5f:59:99:58:df:37:07:c5:d6:04:25:34:e4:23:
ba:8a:81:de:3b:50:e9:49:3d:65:61:6a:b5:ac:16:15:26:39:
76:d0:24:e6:46:90:3f:70:f2:b8:17:4e:95:3c:86:c1:16:f1:
36:0c:e0:5f:a1:ca:5e:c2:fa:f0:96:91:9c:88:17:39:9a:c6:
f9:42:eb:30:67:28:e5:16:0e:2a:48:59:8b:64:5f:40:7c:d8:
f7:7e:f7:11:a2:34:47:85:04:8f:45:1c:8b:d8:7a:4d:d6:29:
43:7d:b7:26:96:d7:68:e9:9c:1a:64:78:f7:7e:47:30:a2:f2:
4b:13:ea:c3:6b:f0:c2:da:80:90:24:46:37:2c:ae:d8:11:ba:
14:60:5a:ac:ac:0b:9a:44:0d:1b:81:b9:b5:95:03:7a:46:e7:
82:01:93:a4:1d:d8:e3:ed:a3:bb:21:ac:e1:70:ae:44:5a:e2:
b4:42:bd:d8:40:4d:17:74:70:26:2d:9f:c7:40:da:c3:f7:a6:
a6:e9:ee:01:8d:be:a9:ea:7a:a8:ff:65:26:40:4b:d8:49:9b:
e7:04:d8:30:b3:57:32:a7:60:45:1b:5e:0b:68:9b:97:ae:72:
f9:1c:b3:fc:cc:01:a3:89:e0:08:61:08:21:1a:a1:94:01:d8:
39:bf:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:18:35 2024 by rpki-client on console-ams.rpki-client.org