Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer (raw, json)
Hash identifier: CdlK+ajfQCT0PSffGPPXRl/5nVzXO/n1h70I145QpFY=
Subject key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02044B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Aug 2024 19:21:11 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.13.212.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132171 (0x2044b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 19:21:11 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:46:cd:0e:f4:df:70:83:c6:f4:97:d9:15:
d7:e4:a3:09:48:5f:74:4f:7e:c9:bf:b1:a2:08:ea:
c4:95:95:b9:75:b1:07:2b:7a:24:4a:cb:74:fe:cd:
2f:c4:4c:bb:ff:01:a9:7c:76:5c:90:08:5d:3c:1e:
b0:6a:3d:4b:c0:5d:2e:a8:90:16:ad:45:08:d9:bd:
8d:d2:d4:cb:bb:cb:70:57:0c:5d:9f:cc:76:a7:b9:
47:c6:a2:da:ee:ee:30:7e:91:85:0d:5a:b4:3c:ef:
9f:98:78:9a:24:a0:48:ba:c4:b1:5a:6c:e7:4e:ee:
88:03:fe:c9:67:fa:0e:93:c6:c5:03:d6:cd:ee:69:
a8:e1:02:9b:8d:45:9a:37:60:33:48:7e:3d:9d:e1:
21:c7:ff:a4:3c:f6:9d:bb:ff:7a:cb:ac:cd:89:4c:
44:2a:d8:d9:a2:a7:8e:41:97:26:4a:d5:62:eb:05:
c6:38:3a:75:a0:ae:94:57:c9:af:d0:75:10:f6:a2:
28:77:9f:0f:e0:ad:51:5f:0c:91:18:6d:8b:68:0d:
0f:f0:b4:0e:bf:61:17:d0:f9:db:0b:00:a6:91:9a:
c2:02:16:ac:42:c2:34:d4:62:08:ed:d8:c1:8e:8c:
ae:80:99:e8:27:09:6f:22:98:7b:db:3e:a4:1b:ee:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.212.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:8c:28:10:79:57:f4:a5:ec:4d:ab:20:fa:21:d3:4a:ba:06:
16:99:3e:d0:3a:eb:a3:d9:c6:1b:a8:27:57:57:79:d9:8e:b3:
3a:bd:14:c0:4b:4d:3b:6c:37:43:d9:c5:9d:9b:69:dc:4a:69:
be:4c:52:d4:62:a8:c2:42:07:79:5e:f9:91:f3:4b:5e:67:63:
f6:d8:d7:55:5e:b1:35:14:04:64:46:fa:9c:05:e0:01:9a:3e:
77:df:32:45:1a:2c:2d:30:22:13:b6:c8:96:b4:65:ce:3d:2f:
8a:0a:ea:03:b8:44:4c:d6:de:43:a9:f2:72:d6:4c:e2:7a:8a:
cd:61:a9:55:ef:a2:4f:d2:ca:5a:74:68:4f:56:5e:d5:e1:d7:
61:10:5b:d8:43:71:af:9a:e6:3b:99:d4:61:ea:c2:7e:62:60:
ad:9a:25:31:4a:da:bd:16:a3:1c:7d:03:ea:50:ba:ad:e1:98:
08:6f:cb:e6:32:dd:96:f6:f1:bd:42:ae:1b:65:c6:00:65:1e:
e0:8a:37:75:1b:54:7d:af:ca:29:f1:9d:c9:59:2f:b6:42:67:
88:cf:12:90:b3:cb:a7:27:3d:cd:8a:d6:8d:64:a2:b7:e4:0c:
da:34:16:c2:30:4e:f6:1e:90:a6:b6:e9:20:95:5a:f9:ba:9e:
68:58:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:35 2024 by rpki-client on console.sobornost.net