Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer
File: Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer (raw, json)
Hash identifier: o1CHiQLRY9H8ZArkyW56gUVpwK+ine2u+RZKxhg/e6A=
Subject key identifier: 56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0209BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Aug 2024 16:18:19 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 136544
IP: 2401:2640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133567 (0x209bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 16:18:19 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:02:6e:40:9a:e4:ef:64:f8:f8:93:c4:57:
02:0c:1c:42:cc:59:3b:b6:c2:eb:03:5c:45:e1:1a:
ce:a1:48:8e:97:87:01:03:89:b7:91:d5:72:4a:c0:
3e:7a:57:64:5b:dd:d2:18:86:2f:b9:1f:29:b4:3d:
d3:f6:bc:01:f5:65:f5:ab:15:44:1e:30:fa:20:ff:
9d:b7:3f:6a:5c:2c:00:89:43:d2:e1:e5:e3:11:f2:
52:80:56:1c:c5:22:f3:55:61:97:55:38:99:89:95:
70:55:28:80:6d:96:f6:15:a1:39:7c:60:e7:cb:f1:
66:e7:54:d1:ac:bf:55:e6:63:94:38:9e:f6:16:4f:
2e:a1:f4:40:bf:61:d6:d9:3e:c9:a4:05:14:92:c9:
d7:49:c3:f2:b9:24:83:8f:94:e8:6a:5f:41:e9:8c:
9d:05:51:9f:93:3e:6c:3c:c0:65:dc:86:19:d4:b2:
c0:c2:09:e0:c3:9a:a3:d8:53:14:4b:16:3e:0f:44:
65:6f:02:36:7d:4a:2a:48:83:a6:66:18:4f:b5:f5:
3e:2e:eb:ce:3f:69:9a:ed:84:c7:43:46:f4:ef:9d:
8e:ce:cc:c1:a6:d7:99:e6:ba:5b:e0:44:82:bd:ef:
45:c4:e0:35:73:da:22:5b:42:23:86:02:4b:f3:b8:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136544
sbgp-ipAddrBlock: critical
IPv6:
2401:2640::/32
Signature Algorithm: sha256WithRSAEncryption
23:9e:89:17:d1:b1:73:da:8c:04:02:2a:d0:e5:ae:57:23:3c:
6a:d6:e1:aa:da:2d:20:f6:ad:ad:6d:37:01:dd:bd:d3:d1:75:
a6:04:e5:d0:f8:9a:29:bf:c9:db:f9:8c:41:17:64:33:04:aa:
ba:e9:3a:24:b8:80:70:88:d5:e6:59:56:7b:71:84:7b:1f:96:
8d:6d:3d:66:b7:b1:fb:7a:7a:d1:74:f1:0b:0e:ca:4a:9c:79:
a2:7a:8b:48:e0:56:ef:51:ed:b3:51:92:2e:93:60:2c:3c:ce:
1f:22:b1:1a:fc:e3:bf:eb:a4:93:61:a5:65:ec:23:4b:4f:f5:
b7:a6:57:d0:1c:b7:b0:6a:9e:7c:07:ac:39:a7:c3:7f:ac:53:
2e:5f:b1:00:a9:eb:25:c9:11:8d:2a:9a:6e:47:75:c6:50:ed:
8c:28:d1:75:7e:5a:03:34:42:b5:8a:d9:d4:71:92:2c:85:aa:
75:2a:51:f4:48:2e:78:47:7e:c7:d7:6e:a0:fb:9f:d9:79:38:
48:b8:aa:ae:68:20:49:eb:e5:b0:eb:06:50:9c:8a:8f:de:55:
38:95:eb:f0:89:3a:28:e6:cf:21:05:95:ae:5b:91:84:a5:5b:
ee:ff:d0:8e:8e:c0:80:24:d9:73:0a:83:84:a1:78:16:5a:5e:
5a:37:fb:07
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAgm/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyOTE2MTgxOVoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzc2RTQxMTAvBgNVBAUTKDU2OTlBNkY1MkY5MDA1NzM4MkNERTk2
Rjc2NTI2RjdGQ0EwMTkzQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0zwJuQJrk72T4+JPEVwIMHELMWTu2wusDXEXhGs6hSI6XhwEDibeR1XJKwD56
V2Rb3dIYhi+5Hym0PdP2vAH1ZfWrFUQeMPog/523P2pcLACJQ9Lh5eMR8lKAVhzF
IvNVYZdVOJmJlXBVKIBtlvYVoTl8YOfL8WbnVNGsv1XmY5Q4nvYWTy6h9EC/YdbZ
PsmkBRSSyddJw/K5JIOPlOhqX0HpjJ0FUZ+TPmw8wGXchhnUssDCCeDDmqPYUxRL
Fj4PRGVvAjZ9SipIg6ZmGE+19T4u684/aZrthMdDRvTvnY7OzMGm15nmulvgRIK9
70XE4DVz2iJbQiOGAkvzuHHNAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUVpmm9S+Q
BXOCzelvdlJvf8oBk6MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc3NkU0LzQ3NDI4ODcwRTlGMDExRUNBODM1OEE4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NzZFNC80NzQyODg3MEU5RjAxMUVDQTgzNThBODRDNEY5QUUwMi9WcG1tOVMt
UUJYT0N6ZWx2ZGxKdmY4b0JrNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhVgMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAEmQDANBgkq
hkiG9w0BAQsFAAOCAQEAI56JF9Gxc9qMBAIq0OWuVyM8atbhqtotIPatrW03Ad29
09F1pgTl0PiaKb/J2/mMQRdkMwSquuk6JLiAcIjV5llWe3GEex+WjW09Zrex+3p6
0XTxCw7KSpx5onqLSOBW71Hts1GSLpNgLDzOHyKxGvzjv+ukk2GlZewjS0/1t6ZX
0By3sGqefAesOafDf6xTLl+xAKnrJckRjSqabkd1xlDtjCjRdX5aAzRCtYrZ1HGS
LIWqdSpR9EgueEd+x9duoPuf2Xk4SLiqrmggSevlsOsGUJyKj95VOJXr8Ik6KObP
IQWVrluRhKVb7v/Qjo7AgCTZcwqDhKF4FlpeWjf7Bw==
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:53 2024 by rpki-client on console.sobornost.net