Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEyeF34uazfkomCrI0zlR-DNmrw.cer
File: mEyeF34uazfkomCrI0zlR-DNmrw.cer (raw, json)
Hash identifier: yHszWKqJXBczYy4mZl8DUSeoQr10DsdwDXzgzN5hO3Q=
Subject key identifier: 98:4C:9E:17:7E:2E:6B:37:E4:A2:60:AB:23:4C:E5:47:E0:CD:9A:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0210DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/mEyeF34uazfkomCrI0zlR-DNmrw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Oct 2024 06:20:44 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 203.17.4.0/24
IP: 203.17.95.0/24
IP: 2001:df0:421::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135386 (0x210da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 06:20:44 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91ADF45/serialNumber=984C9E177E2E6B37E4A260AB234CE547E0CD9ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:90:57:b0:21:9e:01:46:a1:bf:be:ad:8c:
51:70:ea:9d:65:96:48:8b:ee:5a:1e:1c:90:db:aa:
95:9a:5b:6b:d9:f4:95:2d:40:bb:cb:4c:56:e2:34:
8b:dd:0f:10:85:a8:1e:0e:ec:45:3b:60:88:f3:21:
b1:f3:39:a1:14:d5:f7:f8:90:72:16:d3:6f:db:d9:
df:a1:d7:c7:f7:5e:67:d4:be:64:ce:86:c3:21:f7:
c6:59:19:63:45:84:cd:1e:cf:e4:35:aa:e2:43:8e:
c2:46:6a:f1:bf:95:bb:67:79:e1:fa:ef:dc:01:f4:
24:00:f6:4f:7b:e3:a6:93:ca:0a:9c:6e:61:f8:41:
cb:e1:4a:95:7d:d9:88:41:92:75:d4:57:be:1b:3c:
10:ec:2c:5f:a8:ca:0b:b1:de:f2:8d:db:30:61:71:
5a:e1:4d:52:42:e1:e8:02:2c:2a:24:f1:2a:a3:18:
11:01:a3:41:bd:8f:67:db:1f:df:7e:04:be:e1:fa:
90:bc:b6:ba:73:df:f6:2d:c8:67:20:5c:82:62:0e:
da:95:45:a6:a0:7f:fb:92:3d:29:59:68:9d:44:6c:
dc:19:db:c4:12:bd:8c:6d:98:78:4a:26:3f:a9:18:
f5:5c:59:63:47:e4:b1:d3:03:e0:d0:31:8e:1f:9d:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:9E:17:7E:2E:6B:37:E4:A2:60:AB:23:4C:E5:47:E0:CD:9A:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADF45/B5B3F6C4140811EFB9D2075AC4F9AE02/mEyeF34uazfkomCrI0zlR-DNmrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.17.4.0/24
203.17.95.0/24
IPv6:
2001:df0:421::/48
Signature Algorithm: sha256WithRSAEncryption
c1:6a:8d:8d:05:95:3d:fa:12:77:bf:01:dd:e2:cc:c2:5c:49:
4b:30:51:ac:81:6b:1f:45:7b:80:14:ad:08:9e:be:77:fd:41:
16:f7:7e:de:8c:90:21:00:71:a9:39:09:45:39:d7:00:a7:29:
c2:d9:73:1b:4f:1a:01:34:fc:01:f1:b0:46:d4:eb:30:b6:65:
19:ce:6e:d1:4c:f1:0b:17:27:ba:e8:67:48:4d:7c:52:89:0b:
8b:33:a3:f8:c5:11:07:70:1d:f8:c6:27:07:02:a8:de:81:e1:
d2:8b:8f:d9:cb:c8:a2:0f:51:45:f5:80:9c:51:5e:35:bf:15:
a7:eb:40:db:6a:75:28:f7:b7:b3:ce:70:0b:41:9d:32:90:51:
2c:75:4f:38:cb:42:3d:30:70:01:98:e0:cf:5d:04:86:3f:d7:
47:04:d0:97:40:bf:2b:5a:d4:30:a4:7b:a7:e3:d3:93:87:ff:
74:03:ba:f9:94:ce:c6:e2:89:9a:1e:79:3f:1d:fd:55:95:00:
77:27:62:71:dd:77:e4:b1:7d:95:c4:34:4a:15:8c:dc:d3:71:
56:50:e6:b2:c6:7e:6c:a3:3a:ac:f7:1e:ee:c3:26:69:a3:af:
a7:a0:69:df:08:2d:80:66:cb:cc:f7:2b:5c:bb:67:4a:34:36:
2d:14:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:06 2024 by rpki-client on console.sobornost.net