Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer
File: zHLheXsiBNjsaeyYxBc5zIxmTJw.cer (raw, json)
Hash identifier: fEhIbKqnY2Bd1jNTPoA+g9Zb+Wf9EWz5Jo7xezp6jHU=
Subject key identifier: CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D350
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Dec 2023 20:22:47 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 134585
IP: 2403:5bc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119632 (0x1d350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 20 20:22:47 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:0a:53:51:5e:67:51:5d:23:ab:be:9b:ad:
56:07:e3:8b:8f:8b:00:41:68:9b:ab:49:3e:46:1d:
42:67:b9:e6:b5:17:03:96:82:f1:2f:f4:e0:da:b4:
32:27:1e:70:23:b0:ad:03:82:ec:e6:cc:af:f2:0e:
e7:8b:db:69:2e:52:74:d3:c9:e3:ae:ec:88:e7:b2:
89:ab:96:52:9c:71:9e:f0:a6:cf:82:61:8f:25:99:
53:9f:06:a3:2d:8e:32:a0:52:ca:41:f0:58:ab:02:
53:37:b0:9b:36:c5:ac:fa:33:74:75:67:23:53:b1:
3e:22:dd:6b:e8:82:05:95:ff:93:35:ea:8c:ae:21:
7e:9a:1b:1f:c9:86:fe:ce:f5:f0:20:12:71:e6:3d:
d1:b0:4b:77:ed:a6:3f:de:85:f2:88:23:7f:ab:fc:
15:d0:ae:de:de:c6:42:22:0e:6d:ca:d0:b6:05:9a:
ea:d1:04:f4:38:43:57:f7:01:84:59:10:56:0a:df:
7d:71:f3:81:75:dd:58:44:12:10:6e:f0:f4:9b:e6:
e4:1a:e0:85:10:ce:77:72:1d:6a:9c:2e:4f:90:ea:
d2:72:27:9e:fe:de:c2:52:c1:16:43:a5:b8:bb:ae:
89:e4:b0:64:84:1e:48:b6:06:83:bb:f7:8c:cd:a2:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134585
sbgp-ipAddrBlock: critical
IPv6:
2403:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
65:0a:b1:29:ff:27:de:17:ba:c9:cc:be:96:e3:fa:af:c5:01:
93:c5:e1:22:83:60:cb:f7:49:c6:d2:3b:75:a3:fc:ad:e5:b4:
61:13:eb:32:a8:39:90:f1:1f:a4:ab:be:a6:96:9a:f8:96:53:
61:eb:4c:c2:99:22:be:19:e6:8d:85:80:a4:82:81:d3:34:00:
28:7f:6b:2f:8e:54:99:8c:fd:7d:eb:1c:f1:ea:39:98:f7:81:
18:a6:fb:00:6c:8d:34:40:38:68:76:cc:91:73:c8:ed:68:ef:
fa:dc:c7:6d:0e:32:19:f3:af:90:aa:fe:d7:4c:63:67:0f:f4:
be:e8:0b:55:c0:14:4e:b9:ff:ee:6f:21:27:e4:cb:9d:3d:05:
e5:07:0e:15:37:85:da:94:75:99:d8:c5:28:44:69:23:73:81:
d6:3b:68:25:9b:e7:9b:af:34:22:2f:fb:81:37:61:3c:02:a8:
f1:ec:3d:29:96:ba:a6:0d:65:1a:bb:11:11:1c:30:ce:74:79:
67:f0:a4:2f:1d:a2:27:3d:e7:45:14:67:3f:66:88:f9:87:44:
11:08:37:77:eb:ff:7b:40:e9:72:b8:6c:51:44:2b:a0:67:45:
9d:80:0a:33:75:1d:3f:48:45:c2:f2:1d:a2:61:55:03:bb:42:
50:4e:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:17:04 2024 by rpki-client on console-fra.rpki-client.org