Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
File: e1mk24bvVBn3rb3aHfUrUJ7m33U.cer (raw, json)
Hash identifier: uDFd6RTzIEENeyq7eQ+QjL/7Aygs9ExHAlXc0dExWLQ=
Subject key identifier: 7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FE49
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jul 2024 23:15:45 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 2400:7ba0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130633 (0x1fe49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 4 23:15:45 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91F3853/serialNumber=7B59A4DB86EF5419F7ADBDDA1DF52B509EE6DF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:f7:44:5d:37:c3:5d:9e:85:05:b5:b1:21:
6c:58:72:76:de:2a:13:93:80:9b:25:b1:35:4b:55:
5f:df:d6:ef:3a:14:44:f3:a9:54:48:91:50:a1:03:
65:66:2f:75:38:a8:dd:d4:fc:ef:63:4a:d4:7e:c8:
f4:b4:fd:d5:1b:dd:3e:58:7c:a7:2d:4b:80:ad:17:
e6:e7:17:df:ac:fe:e2:51:3b:28:7c:1e:a2:e2:27:
fd:57:fa:27:93:7a:bd:c8:15:9a:37:c3:c4:f4:cc:
c2:64:9d:8b:3a:ce:60:fe:2e:59:5d:96:3f:31:ca:
21:e9:dd:b9:91:f3:d8:66:ea:75:05:6f:47:e2:47:
1e:d2:30:03:58:be:b9:03:dd:02:e2:78:e8:36:4c:
9e:95:34:55:b5:b0:8d:ea:7d:d9:00:a9:03:be:87:
d5:27:af:78:45:02:0c:f8:60:9d:e7:6c:2b:d2:5f:
ff:96:a2:b2:28:33:16:1c:c9:48:50:a2:6a:24:15:
5c:06:e8:92:57:f8:d6:82:47:73:be:dd:11:54:e5:
7e:b4:f5:15:61:50:71:c0:2b:52:b8:5a:b3:4e:30:
0c:b6:b6:56:a9:4a:d6:5d:bf:f5:aa:fd:2b:b0:51:
fd:ca:e6:db:8b:5d:e4:0b:c7:17:7a:a1:9a:6b:23:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:7ba0::/32
Signature Algorithm: sha256WithRSAEncryption
17:98:98:af:39:43:18:84:23:e7:d3:ae:38:0c:a8:97:42:e5:
5d:87:a7:57:b6:2a:d4:7a:79:da:05:b1:21:5b:cb:3c:0e:34:
21:f0:63:95:e0:57:d3:0e:24:04:63:99:6d:82:e6:53:63:d0:
a0:51:d9:e8:e5:1f:57:d9:fc:25:68:a4:ef:3a:07:0f:e4:5f:
8b:55:d9:63:71:46:cc:f1:d9:b1:5e:5f:22:37:49:e5:76:e5:
f6:d0:f1:ee:13:a5:5a:e8:37:2f:5f:a4:6f:2c:67:04:80:37:
4e:11:8d:e4:53:a7:d3:f2:b7:d6:c2:91:ba:6a:a4:98:cd:2b:
89:e0:44:cb:ec:49:d9:42:ef:11:8b:60:ae:9e:1b:ce:c4:6f:
be:5b:83:64:f2:ff:0a:39:34:65:30:ee:f0:f8:06:b3:d7:2c:
2b:ee:31:af:91:dc:0e:d7:8e:41:9a:9b:a3:a7:bd:fa:22:dc:
32:42:85:47:cc:2c:30:39:c5:c3:e3:a8:9c:f7:f4:66:a9:85:
f6:e7:31:5c:03:09:3c:d1:bd:9d:1a:37:f9:33:f7:48:56:b9:
e2:5f:5f:65:9b:d8:b4:91:85:2c:b0:ce:76:3c:b8:98:9b:8c:
42:60:dd:4b:e6:82:bc:64:d5:03:92:34:78:f8:46:4d:3b:66:
74:f8:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:58 2024 by rpki-client on console.sobornost.net