Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.cer (raw, json)
Hash identifier: SkZY2d+JJzNSfNHhwMQ2kkqOz10P3ofEkCK6Moql4sY=
Subject key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E207
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 17:57:29 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.160.100.0/23
IP: 2406:e840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123399 (0x1e207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 17:57:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:64:2f:58:ea:73:55:b8:c4:c5:5b:33:0d:
fb:a4:d1:10:79:b9:99:66:b1:ed:ea:28:32:49:e7:
4f:08:dd:a4:27:64:28:8d:f7:cc:f1:f7:bc:47:37:
d8:6c:47:43:db:6d:b4:74:04:ba:e9:d7:00:78:00:
d9:80:96:61:0f:eb:fd:0e:c9:09:ef:00:3d:f9:f4:
52:e8:f1:d5:7f:dc:b4:1e:f1:c5:5b:c2:45:21:b7:
a4:14:78:eb:34:51:5d:d7:f4:14:df:95:de:02:fd:
6e:6b:98:94:b3:e6:93:9b:66:a6:37:cd:49:48:10:
e4:8c:bd:60:6b:d9:a0:a1:15:62:6c:b6:71:01:12:
72:3e:01:58:60:89:1b:df:4e:e6:e2:4b:9a:42:4b:
64:8a:b3:5a:27:bc:fc:0e:15:82:49:cd:1d:88:38:
42:b8:ea:74:81:29:a3:bd:b5:b8:0e:cc:63:c6:a7:
49:a2:01:7c:ce:c1:06:c1:c4:95:62:42:42:db:a3:
6a:e2:9f:f4:7a:44:d0:e0:68:4e:af:ef:14:87:3d:
0c:d2:7c:94:d7:ba:b5:e5:52:00:50:e7:e0:42:2f:
27:3c:a0:70:50:e5:27:fb:4f:47:21:cb:f9:2a:2b:
03:62:4d:ed:08:90:f0:13:2b:86:c9:e9:28:6e:0a:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.100.0/23
IPv6:
2406:e840::/32
Signature Algorithm: sha256WithRSAEncryption
65:f8:df:5e:cd:16:56:7a:dc:28:6e:6d:52:bb:f3:8d:c0:4d:
25:43:6d:64:cc:02:7c:f2:5a:9c:f9:d2:cb:69:41:1b:e4:a0:
9c:2c:7a:b2:1e:c5:fe:d1:48:7c:f6:52:39:c4:1a:5e:78:8e:
46:70:b6:cc:1c:bc:2a:9e:d2:aa:7d:f6:5a:04:cb:bf:91:a6:
23:f2:c0:a7:ec:80:73:b4:ae:a4:c9:9c:7f:1a:3c:8f:39:90:
a0:c5:6b:34:a0:1e:96:59:50:45:d0:e9:20:f9:2a:af:92:e3:
5f:fb:03:d3:11:95:79:7a:f6:db:2d:13:d9:81:0f:63:6b:0a:
9f:8d:ef:ca:71:e7:92:c3:c6:5b:8d:0d:87:50:38:dc:b5:ff:
0a:a4:1a:59:e4:cf:c4:b5:dc:76:78:ea:31:a4:4d:17:84:1a:
b8:62:ce:f8:b4:45:f0:59:14:f5:05:63:2e:67:2c:8f:30:8a:
5d:86:2d:71:8c:7a:56:a1:59:10:48:21:63:19:4e:16:9b:ea:
d8:85:b4:03:11:12:7e:31:59:c9:5b:00:55:e9:a4:5d:3a:fa:
f3:77:c9:bd:94:7f:64:76:dc:fa:0b:e3:cd:53:a5:cf:d1:60:
3c:00:7c:02:16:b7:3e:4f:a3:02:1c:10:dc:7e:16:1e:a8:3b:
ea:25:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:16 2024 by rpki-client on console-ams.rpki-client.org