Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer (raw, json)
Hash identifier: ZsToDQ+qhqwY4rE2huE33h00221JAdx/k8fg2sQATdg=
Subject key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02135A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 12:23:01 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.72.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136026 (0x2135a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 12:23:01 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:49:c4:ff:af:48:9d:69:a6:0a:0e:8a:48:
10:a0:b3:73:84:46:ce:b1:d7:81:9b:a1:61:20:a3:
37:c7:ed:96:fa:8d:5c:c3:9a:d0:ba:be:24:80:f8:
aa:d6:4d:f3:d7:7a:07:97:78:a4:72:c9:a0:dd:06:
d4:36:b4:da:0d:f9:a0:64:4b:d7:8c:67:f1:ea:a6:
e2:ef:55:ab:51:54:02:0f:6b:c0:b0:a5:a8:e8:e8:
5d:25:26:dc:9c:e7:0e:55:57:4e:2a:fe:9c:46:7f:
9c:66:05:28:9b:80:77:4b:9e:a9:b4:cf:67:4d:3f:
ce:e7:da:c9:db:9d:dc:34:50:db:a2:0c:d3:2e:25:
4d:76:e9:b3:27:0f:c3:0d:5a:9a:64:75:15:63:f4:
b3:87:4c:ba:0f:b3:9b:f8:48:9e:a4:1a:4e:cc:25:
9e:5a:22:a6:97:80:76:8b:3f:95:aa:f6:80:06:15:
21:5b:6b:44:11:c4:1c:de:7e:d5:d5:ca:81:9e:6f:
1c:d7:b1:33:1e:73:b6:e0:4c:a0:fa:8e:03:52:38:
93:bd:61:13:48:47:a9:e5:14:7a:a0:20:5d:eb:ad:
7c:03:e2:c1:2c:3d:d2:70:f5:dc:e2:cd:e7:d9:df:
ba:e5:0f:51:b3:a7:38:d5:e5:5d:7f:1a:e5:c7:23:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:45:0c:fc:1b:e3:69:c1:1d:7f:1f:59:31:4b:24:f4:5c:98:
11:72:9e:3d:63:d4:9d:7d:c7:42:53:e5:9f:49:c8:b1:ac:3b:
75:0b:f5:4f:c7:2d:36:93:ac:b8:5f:d2:ce:b7:4b:8e:5c:61:
76:c1:73:e7:7b:50:d6:45:ee:01:bb:30:7c:ca:8d:5a:55:85:
f9:05:db:da:d9:68:7b:6e:8f:b4:29:22:82:e9:82:a6:69:fd:
8b:0a:12:c2:a6:3f:d9:5c:25:27:92:14:b5:63:1e:12:89:ff:
24:39:ad:e4:c8:46:80:80:6b:76:af:78:33:01:c5:fa:bd:40:
9e:47:eb:d3:f1:4b:d4:fe:00:e0:2b:56:5a:fe:5a:dd:d1:b9:
55:2a:89:8a:f5:cf:41:3d:19:60:a9:66:ad:a9:23:87:64:06:
98:d8:ad:39:cd:43:3a:65:d2:e9:25:27:54:5f:51:99:1c:f3:
94:60:e1:8d:74:40:ba:ea:72:c7:18:27:6c:18:12:a8:5c:5d:
f7:36:e3:da:c1:f3:9c:68:b8:14:c0:6d:f2:d7:66:32:a3:5f:
5d:03:9f:27:b8:51:5a:e5:6a:b2:21:94:06:52:f6:99:dc:39:
ad:e0:22:82:83:e1:ac:4e:df:2b:0d:4b:dd:1e:ea:82:05:a4:
4b:fd:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:25:12 2024 by rpki-client on console-fra.rpki-client.org