RPKI Certificate
Location: rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (download)
Subject key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest: rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
CA Repository: rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notification URL: https://rrdp.apnic.net/notification.xml
Subordinate resources:
1: IP: 155.205.0.0/16
2: IP: 198.51.211.0/24
--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15249 (0x3b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 14 05:45:21 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.0.0/16
198.51.211.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a3:a7:5c:34:ab:16:fa:78:90:8d:0c:5d:69:52:b8:f2:03:
e4:bc:95:98:0f:98:29:a6:13:f7:99:6e:b9:d3:9a:2d:ea:2d:
f7:91:62:50:a6:90:bb:e2:2f:c9:c1:8b:1c:0e:4b:b9:f0:e1:
f1:d9:4d:57:7c:32:e9:7a:c7:60:f3:9b:a1:ce:2d:3d:16:32:
cf:03:73:f9:25:80:ad:c2:c7:00:0e:09:65:cc:a4:90:6a:40:
51:72:c4:c7:33:5d:0f:fe:55:a3:4d:c1:ab:4b:85:2a:2d:27:
16:d9:c3:fa:f8:d6:93:e4:f7:cb:2c:6c:6b:75:a6:bf:a8:be:
b7:d2:87:03:f9:fa:d1:8d:36:ed:b1:ad:25:03:2f:19:b5:a0:
50:d0:39:44:6e:06:a5:ac:0c:a0:25:d6:7c:c1:b7:99:d8:6d:
62:df:d2:dd:57:bb:89:7b:c4:ce:28:8b:fe:ef:df:e2:69:db:
e4:9b:1c:43:70:7a:c9:1f:4a:70:a8:61:77:75:f4:12:f3:5c:
31:c1:72:04:5f:a3:74:7e:71:37:c3:42:c9:b3:c5:dc:dc:95:
d9:79:b3:81:ac:ca:b1:0f:a3:b4:54:35:03:65:76:e5:63:b6:
d0:1e:07:d6:2f:c6:9c:d5:fb:22:96:2a:89:77:8f:62:8a:9d:
fd:64:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.