Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
File: ZwbZhOcxaBICGI0pntNfAFsBdYA.cer (raw, json)
Hash identifier: YAzqYv4FYJAmRNLjLFA6w+th87O7C1//OjCNpJveZ1g=
Subject key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021371
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 14:43:03 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 17564
IP: 103.8.160.0/22
IP: 150.242.180.0/22
IP: 202.75.4.0/22
IP: 2401:b00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136049 (0x21371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 14:43:03 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:aa:81:92:2b:15:9f:bf:d2:b8:fc:a3:a6:
6a:32:84:b6:1e:62:e9:f6:db:8e:d8:c9:bf:87:cf:
67:47:72:e4:5c:5f:94:aa:37:ae:58:60:ca:7a:84:
63:b6:cb:07:ea:48:a9:39:2c:e3:6e:94:d1:c1:69:
ff:fc:4a:55:f9:d7:81:ff:2e:57:87:49:a3:fc:c2:
fe:25:50:d2:1a:aa:dd:31:14:7a:91:b4:36:c2:17:
14:3a:44:65:70:03:cc:8d:93:05:8b:ec:16:7b:d0:
8d:03:59:af:43:98:15:39:3c:df:82:63:2e:16:76:
06:a2:f1:b3:79:b8:04:30:7a:51:8f:93:69:a3:68:
4b:42:c2:f5:6b:ba:ee:2b:db:1d:0f:a2:94:1d:e0:
14:0a:77:90:d1:09:b0:84:00:8c:cd:45:29:a9:26:
2c:6e:3a:2b:34:c4:2a:a8:b2:b1:4d:63:62:78:65:
3b:ff:b1:25:4b:fa:d0:34:91:97:82:76:eb:10:2b:
af:03:c8:7b:8f:a8:40:12:d9:1a:eb:5f:44:13:27:
92:f4:f0:8f:b5:15:62:78:d9:84:4b:74:23:8c:69:
eb:ad:5b:f8:9e:68:de:ff:7d:89:9b:c1:15:db:8e:
42:c6:2b:54:8f:8a:9a:52:6a:2b:81:a9:ee:33:e2:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17564
sbgp-ipAddrBlock: critical
IPv4:
103.8.160.0/22
150.242.180.0/22
202.75.4.0/22
IPv6:
2401:b00::/32
Signature Algorithm: sha256WithRSAEncryption
5f:f2:10:d6:3b:84:45:a0:0e:0e:18:c9:a5:ac:25:56:2c:3f:
0c:4c:3e:81:70:8f:bb:2d:06:c1:11:6f:8e:36:d6:11:77:f9:
b0:e3:90:f1:a9:b4:1b:c2:23:91:12:bf:1a:df:16:4c:2f:20:
42:64:46:58:05:18:21:e8:67:8b:e8:fd:1b:7c:07:30:68:c2:
d0:26:3d:7f:0f:a2:c3:b0:86:9e:30:fd:14:4a:c0:df:6f:83:
bc:78:d9:5d:c2:fb:f3:6c:13:d7:40:13:a6:5b:50:7d:49:23:
81:ed:65:95:e9:4f:9e:f1:ee:2a:4c:1d:a1:8f:5b:4d:1e:29:
0e:29:9c:20:82:de:ec:c4:cd:4d:06:b6:bc:42:69:58:5a:91:
23:c1:af:5d:60:83:02:17:8b:b5:14:24:7c:db:6f:e0:46:e4:
c8:c8:9b:99:32:53:6e:38:2f:3c:96:6a:11:80:97:05:82:e3:
90:a1:40:5b:07:8f:43:c2:c6:02:1a:41:2d:eb:09:29:92:7a:
51:42:84:f7:01:46:2f:36:72:61:db:c4:8e:a1:56:74:0b:f7:
5d:2a:58:02:c9:07:3f:d2:9c:11:45:47:21:e4:9a:68:d6:4a:
d9:13:de:7d:96:34:a9:c9:82:4f:f7:ab:ac:b8:4d:f9:a2:45:
d6:76:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:55 2024 by rpki-client on console.sobornost.net