Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer
File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer (raw, json)
Hash identifier: pfkNNRjefQIdnJTQLD1uw5H+JpiLyF/oN5gPnp7lAEU=
Subject key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E421
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Mar 2024 20:57:40 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.107.152.0/22
IP: 2402:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 19:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123937 (0x1e421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 20:57:40 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:4b:60:4d:12:46:fa:61:a7:57:37:0f:ba:
a0:01:23:26:54:4b:a9:6a:86:ea:b7:58:7c:1e:a6:
ac:7e:a5:fe:a6:ba:29:31:e7:42:9f:d8:0b:b3:2c:
c1:93:96:f9:06:27:b8:42:e1:6b:05:91:ce:bd:b7:
2e:ac:1a:5d:af:6d:6a:76:16:d4:08:fd:f4:51:08:
18:24:04:6a:53:2a:b8:b8:00:07:79:fc:7d:46:84:
e2:3c:16:b9:d1:6a:b1:fa:28:14:14:e4:e0:dd:91:
dc:3b:76:82:f0:4c:27:4c:49:e9:3f:ba:0a:3e:cd:
5f:e8:66:2b:1c:ab:fa:f1:20:56:55:b5:bd:80:50:
9a:da:4a:fd:c9:ae:62:94:a7:71:c4:99:a5:ca:dc:
3f:29:82:d6:31:6f:9b:e5:04:fc:c9:b2:ca:bc:79:
07:c3:c1:46:f4:e6:1a:6a:99:82:ce:39:c4:5d:25:
d5:15:44:84:6e:a2:d7:f9:0f:f6:74:00:06:c6:07:
54:a8:0b:e0:da:e9:46:3f:bb:5a:4a:23:2d:02:82:
7b:df:3f:f6:d6:f1:31:d0:72:bf:fd:24:d0:ad:10:
02:ed:23:25:ac:13:d4:67:44:fc:3f:b0:80:00:7f:
2c:7d:50:df:45:f6:4f:98:c0:36:51:a4:a3:22:6c:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.152.0/22
IPv6:
2402:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:11:bf:45:2e:f5:92:ce:6c:c0:ac:55:97:18:9f:da:5d:5e:
af:0b:34:2d:b6:fd:66:e2:6f:38:77:91:10:e0:57:85:ab:8f:
25:97:92:c8:89:13:19:77:1e:19:b3:7a:64:f5:e3:80:0b:42:
39:95:12:d7:97:a2:ad:8a:d1:8a:ff:a3:5c:d0:0e:80:1f:f0:
78:bf:73:24:53:de:b8:3d:52:40:0f:36:e3:81:62:1c:e5:ba:
a9:dd:15:a9:c1:88:9e:f4:5b:b0:41:6f:ee:f8:4a:bf:7d:9d:
85:68:ea:ab:d6:f0:0d:40:5e:92:69:9e:0b:9f:64:bc:d2:37:
b2:af:df:22:94:2e:09:21:40:d4:17:a9:b0:56:a2:c8:43:c9:
f8:c8:de:8c:31:5f:cb:3d:0b:7b:be:46:36:68:e3:ff:9b:70:
c7:42:b3:43:e9:4d:83:aa:7d:1f:98:3b:76:bb:4f:8a:20:0b:
8c:56:f6:42:99:be:bd:ba:32:f6:58:03:b6:93:ad:b4:db:ec:
b0:1c:6c:6c:c2:21:6d:51:b2:86:ec:e9:62:5c:57:be:9d:9d:
13:78:0b:89:8d:1e:73:9e:ad:89:33:e4:20:70:20:62:41:fa:
8d:84:06:5d:9c:64:34:dc:11:7a:15:5a:ca:cb:d3:74:4c:de:
16:73:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:35:38 2024 by rpki-client on console-ams.rpki-client.org