Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.cer (raw, json)
Hash identifier: 6i+30VzpplQZtVMPoTpI0YUa9tkl/QfULzZWudDYBiU=
Subject key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F163
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 May 2024 03:48:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.114.116.0/22
IP: 103.53.196.0/22
IP: 2402:2f80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127331 (0x1f163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 03:48:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:ae:2a:3a:d9:b4:ae:84:1f:a0:94:fd:f1:
ec:21:f6:4c:18:bf:4d:65:98:5d:08:8e:06:3c:22:
ec:31:50:39:f8:15:29:6c:46:4e:6b:38:18:e0:c7:
0e:2f:50:22:70:c0:3d:fb:73:60:f4:85:17:aa:79:
2f:0f:23:39:2f:c2:a4:c1:17:37:7c:0d:96:dc:5d:
65:9b:7a:c1:03:aa:c8:f2:2e:64:61:d5:9f:9c:26:
bf:4a:18:79:a4:29:50:cb:dc:59:85:f7:e6:10:54:
72:d8:26:d5:90:d7:eb:7d:04:9c:22:91:19:c0:20:
6c:1b:59:f7:89:1c:3d:28:8d:4e:86:0c:e5:e3:8c:
24:07:a6:fd:bd:44:8e:46:fb:cc:bf:56:26:9c:61:
e1:86:11:42:8a:ae:23:dc:b4:4a:34:39:ab:34:60:
15:13:f9:bf:f2:86:b9:48:6d:c7:ea:a7:4a:24:ff:
b4:69:16:36:68:9a:7f:5d:f5:45:22:7e:7a:df:49:
ad:3e:12:6c:7e:58:d9:8b:00:a8:dc:70:5f:25:7e:
b7:15:d7:9f:6e:5b:04:35:92:86:79:d7:ec:ae:48:
37:9f:77:bf:b8:f7:50:b0:7e:a7:4f:e3:31:29:be:
f2:4e:06:87:0b:80:ce:c7:a4:4e:3d:20:01:d6:09:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.116.0/22
103.53.196.0/22
IPv6:
2402:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
5d:73:30:c6:18:a5:18:ec:68:e5:c7:d8:a0:fa:5d:ac:bc:03:
3a:8e:0a:88:6c:11:44:de:72:aa:39:6c:a8:95:fe:41:c0:a9:
0e:4f:40:e7:57:b9:4e:5e:36:f3:9b:87:ff:83:1e:39:0c:c5:
cd:0f:60:09:0e:17:ab:01:69:d6:6b:a3:0f:0f:46:f6:d8:aa:
bc:d4:fe:7b:f8:b4:52:18:bc:8a:17:2e:bf:c0:2f:47:9b:ea:
bd:7a:5d:88:f0:64:7b:2d:0f:d6:98:8f:49:66:42:41:57:36:
99:9b:af:d4:b8:0c:10:7c:11:69:02:95:6d:e3:cd:2f:44:8c:
d0:d7:d6:d4:f8:b0:2d:35:d2:d5:a3:30:9f:c3:f8:69:fa:26:
19:0c:39:18:66:d3:c0:1a:b1:ed:76:db:ed:1b:b9:41:62:a8:
5d:48:fb:7b:4a:c7:49:00:a4:87:30:82:f8:4a:65:f1:5e:7c:
4a:6a:88:bf:a4:29:46:57:ed:fc:06:9f:c8:7a:d3:96:72:6a:
ea:90:8b:13:7c:e2:a6:53:a0:59:32:97:c1:cf:48:de:0c:1e:
d9:e4:16:76:6b:cc:f6:1d:0e:43:02:31:6f:7a:ce:75:71:ad:
5a:3e:f4:01:18:95:13:75:11:14:1a:fe:e7:82:48:b1:0f:d5:
e7:50:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:46 2024 by rpki-client on console.sobornost.net