Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer (raw, json)
Hash identifier: 3ICmW3xvgq5XTTYZdDChBu5ZJyLkAsLAeNq76iIRx2A=
Subject key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 22:37:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 153472
IP: 203.33.72.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Jan 2025 09:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139508 (0x220f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 5 22:37:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:c0:06:b3:b0:dc:77:16:20:f3:24:19:97:
d0:d6:c1:12:2d:31:54:ba:e5:0e:b1:2e:41:8c:a1:
74:94:1b:22:9e:04:c9:09:ff:52:57:ca:20:63:b1:
b8:1f:f8:d2:e4:a1:78:76:ba:19:be:03:33:1d:d8:
f3:aa:a7:d5:ea:3c:73:45:de:41:a3:87:9e:46:ce:
aa:aa:74:d9:cc:b9:57:52:a6:e1:86:83:21:63:06:
43:12:30:85:31:5f:96:65:f1:93:b7:ed:44:5c:00:
8c:c0:dc:d4:55:4d:d8:43:82:c2:08:45:3f:6f:33:
28:41:62:b3:9d:21:da:69:9b:ea:3e:d9:ab:aa:ed:
51:b8:00:da:cd:9e:8e:bc:59:da:02:9d:24:fa:05:
90:c8:56:6e:c4:dc:46:01:64:d7:14:7f:a9:0e:da:
84:4d:28:3e:3d:6e:e1:a2:7a:86:78:cb:82:de:2f:
ae:7d:11:24:1b:ac:f8:e7:33:11:85:18:54:70:9f:
0c:70:f0:35:87:d7:37:0c:dc:43:b1:c8:00:23:9a:
47:a8:e4:0a:00:51:09:72:dd:4f:df:98:b1:9b:7c:
40:78:b5:6b:07:56:49:fc:b1:0d:52:69:f5:80:68:
41:d8:75:d8:44:0f:2f:f7:69:34:56:a9:f4:2c:19:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153472
sbgp-ipAddrBlock: critical
IPv4:
203.33.72.0/24
Signature Algorithm: sha256WithRSAEncryption
37:76:7a:18:55:f3:98:e8:23:43:93:d7:66:87:17:c2:e6:24:
21:9e:1e:f2:b5:40:d5:92:2d:ab:a4:9c:9e:4b:74:a9:6f:90:
5e:a7:35:10:f3:b0:d4:56:57:ba:53:75:0e:5d:01:f4:c9:4c:
97:db:09:e1:5c:f5:03:31:84:4b:06:ed:53:bb:10:25:f1:3c:
27:26:ff:fd:53:8f:86:43:42:9b:d8:47:04:f9:0c:dc:e9:f4:
b8:8b:f6:44:1f:74:2a:6e:c3:bf:34:52:d2:58:22:2f:eb:a9:
23:04:9a:41:b9:a4:af:4d:6d:b8:e8:95:83:cf:1c:18:c1:6b:
06:d5:7e:a9:c0:e4:45:eb:e6:ea:94:c5:86:75:15:d7:63:d8:
83:87:11:9b:58:e4:ac:8d:49:df:0c:b5:92:e9:55:eb:d6:0b:
47:fd:18:9c:19:42:60:c2:9c:a3:0a:ea:4d:f2:3f:90:d8:31:
68:81:eb:44:c4:fe:53:8b:0d:e8:e5:7a:e7:eb:f2:ea:52:89:
d9:30:38:07:8f:28:c0:ee:0b:a1:a8:f0:17:4c:04:65:c3:e9:
bd:54:38:f9:9a:10:cf:35:1c:29:b3:96:7a:2e:6b:5f:5a:aa:
ad:8d:66:ef:1c:18:51:8f:9f:d4:81:55:64:05:0c:1d:8f:fe:
b4:93:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:26:15 2024 by rpki-client on console-ams.rpki-client.org