Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer (raw, json)
Hash identifier: nd9MwdK890m4mi6QfjPHeh4tdma28miKxXWmneomsrM=
Subject key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Sep 2024 16:08:34 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 23896
AS: 23939
AS: 45795
AS: 45817
IP: 202.79.176.0/21
IP: 2401:7800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134650 (0x20dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 17 16:08:34 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:b9:90:07:0d:4f:14:2c:ae:0c:2f:3b:3e:
f4:21:ef:08:75:6c:b0:f4:b3:d4:30:a2:1f:4b:18:
3a:7a:ea:c8:64:0a:a3:fe:5d:b2:ff:fd:74:a1:0f:
2f:57:86:37:39:dd:cb:f4:ae:9b:11:28:4a:e7:9c:
22:60:18:fd:97:fb:74:38:be:22:4f:a8:90:39:5e:
74:d7:71:dc:46:cb:73:c7:8a:5e:be:f3:45:cc:ce:
f2:8c:94:07:fe:ab:69:52:b2:ea:d0:56:7d:ee:14:
72:14:65:30:45:4d:80:8a:b6:b2:5f:4b:2d:f4:f5:
fa:f1:ce:76:62:b7:e9:29:a3:2b:9d:33:ef:97:f6:
26:b0:79:cc:1f:17:5d:34:81:15:55:75:75:20:7c:
68:e7:6b:ba:44:45:a5:b1:b0:a6:58:b3:82:1e:36:
0d:5f:86:66:8c:58:c1:c8:4b:7f:71:5f:ff:27:0d:
02:0c:a0:b3:9f:62:d6:d6:07:1a:9b:6b:cb:88:80:
ff:b3:07:46:a1:7c:2c:6c:f5:6d:aa:5f:42:b5:b1:
4f:ac:bf:93:5f:35:65:72:f9:ab:64:71:54:59:b5:
80:1b:7e:4e:7e:46:9b:f1:09:e3:77:d1:6a:54:f4:
5f:3b:2d:24:11:c5:3d:52:bd:84:6d:b9:4f:db:67:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23896
23939
45795
45817
sbgp-ipAddrBlock: critical
IPv4:
202.79.176.0/21
IPv6:
2401:7800::/32
Signature Algorithm: sha256WithRSAEncryption
8f:0b:e2:a7:0a:1c:ee:de:7c:1f:69:e7:d6:77:46:68:22:21:
c8:bd:2d:1b:57:ff:8c:3d:bf:f8:26:24:fc:d0:67:3c:93:a3:
84:41:b7:75:ac:ea:7e:de:c6:a6:b7:16:e7:7d:b6:a3:40:07:
cf:5e:03:6c:2c:a3:fb:ed:ef:af:31:e1:98:91:05:91:fe:8c:
fc:98:15:05:5a:85:0a:d8:e6:35:4c:ce:fe:1f:8d:aa:d8:11:
2f:7d:72:5d:5a:d8:b9:e2:a4:17:44:1e:c0:85:69:3a:09:80:
06:41:ca:10:52:2a:1c:65:85:c6:16:94:2c:06:19:f6:0d:ac:
6b:1f:b7:5b:fb:bf:70:71:fb:a8:14:eb:d2:8d:4c:12:93:68:
64:b2:c0:c8:e3:31:1b:bf:3d:24:ef:36:a7:01:30:05:13:8e:
cd:ff:c5:0a:05:bc:70:58:6d:41:72:67:c1:4a:10:a9:89:f2:
4c:f9:98:8a:87:95:b7:06:8d:f8:91:74:3b:b8:f7:43:4c:e9:
fc:0a:c6:db:be:21:75:1e:07:d9:9c:43:65:94:55:91:7c:db:
46:5a:5c:5d:13:4e:ed:a2:77:ca:74:d8:cb:dd:48:58:60:61:
07:c5:41:ae:d9:87:33:bb:3d:fe:60:8d:3e:01:80:26:d8:b8:
d9:1c:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:43 2024 by rpki-client on console.sobornost.net