Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.cer (raw, json)
Hash identifier: 2OyW0VXnACT20RpIYtymMNCmpWkmfXyB3fo4AiG/qTI=
Subject key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020D66
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Sep 2024 07:57:01 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 203.5.212.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134502 (0x20d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 13 07:57:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:15:d0:d7:f4:05:d6:99:b6:13:0d:1f:09:
a0:ca:d6:88:ce:2c:8c:9d:26:bb:a2:cf:bc:71:f8:
0d:80:d2:ec:ac:dd:54:36:88:36:54:fb:9d:ef:18:
48:48:e6:01:16:7d:f8:58:a7:a0:0e:5c:14:cf:56:
cf:99:fe:22:c1:9e:19:e5:fb:1e:4b:b5:0c:7d:51:
5a:8e:81:e1:f7:fc:8b:d2:a4:69:03:30:86:84:0c:
3d:cd:ac:b2:6a:00:9f:75:4b:9d:3a:1c:bf:c4:27:
69:70:42:48:c2:8b:4a:d6:6f:ea:55:8f:d6:52:af:
9f:aa:87:9f:8a:d9:94:60:04:9a:80:0e:1a:fb:61:
6d:02:fe:1c:2f:62:c7:8b:7f:e9:80:67:bb:5e:90:
f5:88:6f:78:48:a3:35:c4:83:d8:2e:94:41:e6:99:
cd:b7:a6:51:c3:e7:3b:74:e0:00:aa:39:2e:4f:3d:
78:80:58:84:db:c8:25:21:a9:56:07:71:51:0e:e0:
e1:bc:54:f7:ea:60:e2:4d:5a:43:26:e5:0a:3e:04:
a1:02:3f:b6:ca:ba:42:72:23:6c:5e:ea:ca:a6:41:
8e:2e:e3:be:56:b6:6a:83:ed:1c:3a:97:6e:43:7f:
ee:e9:4c:68:b7:fa:4b:f2:65:93:3a:23:a3:31:ec:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b4:3a:1b:16:65:1d:f2:3f:bf:57:b9:39:9a:41:b9:a6:67:
a6:2c:d3:32:f9:b1:22:81:71:e1:b4:45:90:3d:a1:10:81:31:
17:3b:c6:55:a4:ee:55:8e:6c:07:f0:67:39:7b:2d:51:9e:3a:
d5:ed:39:c2:df:05:94:bc:1a:60:23:08:10:7f:70:f0:34:a5:
52:14:92:72:ad:ba:9f:ab:53:41:33:ab:e5:54:57:66:4c:b1:
d9:e1:0c:18:db:cd:3c:aa:5a:18:3c:ef:f3:7f:1b:c8:f2:ee:
c9:15:f3:64:05:f9:28:ae:fb:8f:a9:1f:82:c7:18:99:99:67:
da:c4:2f:c0:11:5b:f6:b8:ad:89:72:17:6c:fa:a7:06:dd:35:
93:3e:35:4d:bf:4a:c6:02:68:ee:04:e4:42:20:ac:0a:63:56:
14:2a:74:f6:2a:60:5e:9d:5a:71:ab:c9:51:06:9e:37:ae:81:
d2:4e:2d:7b:86:5b:f9:66:43:af:79:ff:cb:8a:ae:00:2e:02:
0a:0d:b4:44:cb:87:f0:5e:d7:9f:c0:d0:c8:19:47:2e:c8:6a:
d9:62:8d:92:bc:b7:a6:84:67:aa:57:4b:80:61:3e:cb:e4:52:
43:11:71:01:8e:8a:5d:5a:77:3d:5f:92:df:e1:89:20:c9:98:
83:c4:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:39 2024 by rpki-client on console.sobornost.net