Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypYLZSt4Zwr6PgknwoSZifn5VM4.cer
File: ypYLZSt4Zwr6PgknwoSZifn5VM4.cer (raw, json)
Hash identifier: nlN7ETXheCVrCZLS2FOB8RnQHvmWxmzIDMBaK+oSY9Y=
Subject key identifier: CA:96:0B:65:2B:78:67:0A:FA:3E:09:27:C2:84:99:89:F9:F9:54:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0210B9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Oct 2024 01:54:07 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 103.171.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135353 (0x210b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 01:54:07 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91C4D7C/serialNumber=CA960B652B78670AFA3E0927C2849989F9F954CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:a5:21:be:77:c1:55:65:5e:e8:8f:50:a7:
7f:94:66:12:35:30:99:64:06:e1:86:d4:8f:7a:8d:
46:ab:a0:d5:d4:a2:2e:cc:f8:cb:fc:ef:d4:90:7f:
ae:16:5d:77:24:b6:95:25:8c:a5:27:7d:90:78:9b:
c0:78:1a:18:b8:2d:1b:68:02:bd:c0:c0:cf:a3:54:
57:13:a8:67:4a:56:dc:59:fa:5b:a9:4f:80:f4:41:
4a:16:22:d3:a7:8b:b0:7b:4b:93:06:c1:c3:d1:61:
2b:50:76:47:8d:c0:f9:a8:48:26:11:b5:5c:38:cb:
aa:38:1c:8a:91:2b:1f:6e:b9:d1:09:57:9a:06:d2:
03:a7:7f:e8:f2:5f:db:b5:2b:14:08:ab:e1:a1:78:
fe:6a:a5:5e:f9:bc:af:35:1a:7f:40:e6:76:9f:cb:
3a:a5:24:a6:c5:a8:b2:3f:9d:83:b4:b7:60:ea:0f:
07:17:69:20:65:b2:60:b6:35:02:45:2d:63:e0:60:
24:d0:21:59:3b:94:c3:8f:4c:09:d9:9b:11:81:97:
c9:f8:c6:02:aa:64:20:98:f7:6d:42:ee:8f:0c:09:
cf:8c:cd:2f:53:90:62:69:a2:36:20:3b:9e:b5:9e:
c1:be:4f:88:d0:86:8e:bb:73:94:af:0f:2e:e5:b4:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:0B:65:2B:78:67:0A:FA:3E:09:27:C2:84:99:89:F9:F9:54:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4D7C/4CF65A86DE3C11EC954ECA59C4F9AE02/ypYLZSt4Zwr6PgknwoSZifn5VM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.26.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:d3:3d:94:bd:db:d8:5d:f8:6f:38:71:ee:ff:53:80:d9:50:
26:78:c1:ab:ac:07:15:dc:d0:1f:60:d4:7e:96:3e:12:67:50:
6b:0e:02:ff:7e:29:b6:0c:f2:47:b2:c9:7c:d2:23:18:ff:a9:
8c:cd:42:8c:01:81:bb:2e:a0:a2:01:93:d7:f3:ad:a3:1a:26:
8e:88:ed:91:4d:a0:a1:ff:8e:92:5d:a6:43:88:e5:4b:d9:ac:
5f:93:4d:73:dd:a1:b9:53:c9:60:5c:8c:83:89:ea:67:63:9c:
47:dc:13:20:86:52:f4:ec:a7:49:1d:83:bd:93:6b:b7:45:4c:
7f:2b:ed:33:7c:59:56:27:4a:d6:73:e5:fb:e9:84:0c:28:71:
06:8c:19:92:14:0a:c7:52:e5:55:51:cf:63:11:e1:0e:7e:6a:
9f:fe:21:d4:46:79:d2:73:9d:51:04:3c:ca:33:e3:e6:75:11:
da:6c:31:05:92:6b:6d:d4:9a:c2:a1:c1:7c:d4:5f:95:5f:60:
75:42:09:74:85:83:fd:b2:3b:6e:57:64:55:38:b7:2c:16:ae:
2d:34:12:4a:ef:16:06:98:8b:1f:15:0a:06:69:62:ad:5b:59:
c3:5e:7d:26:4e:52:9a:1a:8e:85:5d:62:c7:62:ff:f5:96:59:
46:e2:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:15 2024 by rpki-client on console.sobornost.net