Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer (raw, json)
Hash identifier: EIA/ii151DmXgt1oGn//DkQfRxmk6SHbJ1ZkiwQZ650=
Subject key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E834
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Apr 2024 13:10:19 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 149520
IP: 2001:df0:77c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 21:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124980 (0x1e834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 13:10:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:25:b6:99:25:c8:82:ed:81:ee:cd:99:93:
cd:b4:9a:12:c1:2b:7d:6e:93:05:31:ba:7e:f8:76:
95:0f:b0:20:fd:26:6e:f9:9f:ae:4e:ea:2b:13:db:
90:29:80:d0:75:4f:a7:b2:27:34:2c:95:43:50:f4:
d8:ab:91:ee:08:5f:aa:9e:59:36:56:c1:ef:79:23:
8a:03:27:72:a4:2b:f5:7c:ee:5f:95:4b:0b:7d:69:
81:84:b5:0f:6d:89:48:92:90:20:32:13:3b:70:a5:
b5:d7:95:f8:6f:b7:1b:b3:e6:ea:69:1a:8b:f4:00:
b4:ac:63:08:bd:1f:bf:10:0b:f5:d4:77:2e:7f:e1:
29:25:e4:89:01:ce:01:f3:2b:d2:5c:a7:f0:6c:8a:
7f:c8:dd:fd:a5:65:91:16:c8:90:73:45:c0:77:45:
6e:77:60:42:78:ba:83:65:bd:74:86:2e:c6:b5:42:
a3:fd:c9:2a:88:2b:dd:d8:24:02:37:79:1e:22:3b:
fd:a0:b7:9f:f6:9b:bf:6b:ab:20:ec:ad:d6:6c:55:
44:f1:30:35:ec:82:be:d5:b9:2e:d5:6a:ca:73:11:
77:c5:52:ad:57:f3:03:b3:41:33:39:97:fe:eb:4b:
5c:e8:a7:b7:06:3d:93:69:fc:27:a9:9f:2e:b5:c6:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149520
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:7f:d1:9c:e7:c0:79:09:a4:d2:4b:ec:38:4a:f4:ba:86:b1:
e1:66:eb:51:18:6f:64:09:49:90:e8:88:d6:16:6a:92:62:0d:
cf:66:43:70:55:87:09:8c:7c:35:8d:7b:7f:27:2e:51:52:a7:
a7:46:a8:91:56:be:16:16:de:e7:e3:34:96:33:05:ce:5f:34:
5b:b2:0d:f2:2f:89:25:bc:40:d0:4a:d4:fa:22:50:4d:01:37:
95:d5:c2:be:0e:7d:3a:3e:cf:a5:4b:74:46:88:7d:09:f3:5b:
a6:91:2b:78:6d:09:07:13:aa:eb:f7:94:fe:c7:9c:d2:1b:45:
bd:3a:6d:81:2b:aa:9f:d9:31:11:c0:cf:12:1d:5e:73:7a:e1:
4d:9a:e1:00:c0:19:f2:57:60:6a:d3:9d:2c:ad:34:f8:08:81:
53:03:50:97:ab:dc:80:68:8c:9d:8a:0e:5a:2e:07:d6:e8:3a:
a2:7c:c3:56:d4:31:dc:43:c4:fd:dc:32:ef:3e:48:7a:c4:42:
59:59:77:25:f7:91:b7:2e:11:92:d3:33:6c:25:77:c0:13:0e:
df:ec:3b:47:37:ac:a0:71:d8:55:0e:f4:b3:0c:ab:f7:5e:21:
ab:d5:df:96:38:44:42:0e:69:83:d1:cb:88:15:2c:aa:07:29:
cb:81:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:56:38 2024 by rpki-client on console-ams.rpki-client.org