Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.cer (raw, json)
Hash identifier: Vv3j9ZUGHAXHbVBDa7GxhZM2vD9D8Wcmq8aWH1U935Q=
Subject key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E0EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Feb 2024 14:18:56 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 38901
AS: 131178
AS: 137066
AS: 138429
IP: 27.96.84.0/22
IP: 43.245.32.0/22
IP: 43.252.16.0/22
IP: 45.115.80.0/22
IP: 45.115.208.0/22
IP: 45.118.76.0/22
IP: 49.156.0.0/22
IP: 58.97.192.0 -- 58.97.231.255
IP: 103.9.188.0/22
IP: 103.12.160.0/22
IP: 103.30.196.0/22
IP: 110.74.192.0/19
IP: 113.130.124.0/22
IP: 119.82.248.0/21
IP: 163.47.12.0/22
IP: 163.47.172.0/22
IP: 202.58.96.0/22
IP: 221.120.160.0/22
IP: 2400:4880::/32
IP: 2404:300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123118 (0x1e0ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 14:18:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:4e:6e:f7:91:51:41:d2:12:0d:3f:95:63:
45:9e:ca:b4:0b:6a:2a:2f:99:72:98:e5:f3:42:35:
28:5e:68:2a:2b:02:55:3b:80:47:37:b6:eb:13:c2:
fc:00:8e:cd:a0:51:8a:f4:f9:e4:46:4c:27:26:04:
3a:e3:de:32:d9:d4:5a:36:d8:fe:87:84:bb:2c:de:
c9:f3:be:0d:14:ae:96:de:dc:bd:13:9d:0b:01:52:
25:6e:08:71:5c:05:65:96:8c:a3:8f:22:4e:09:91:
f7:50:93:5b:7d:02:67:e2:f1:7f:01:a5:a0:84:e5:
b1:52:e0:b2:c4:39:43:8a:a7:d2:c0:2e:d4:9e:e3:
a8:c3:ef:a5:07:6c:58:09:c2:be:92:40:f4:5c:84:
fc:f2:da:ca:17:22:83:2f:d0:ca:2f:6b:13:1f:7c:
eb:c8:c8:49:43:e1:20:1d:09:31:4a:1c:71:98:37:
e3:5d:b8:df:03:11:f3:09:bc:8d:ce:fe:29:e8:4c:
c9:38:64:73:6b:a1:6c:21:08:39:46:1b:46:19:f0:
7f:ab:c1:38:e7:0c:75:9f:67:44:c6:07:10:6c:1c:
ec:90:ed:50:c0:42:f7:79:df:d0:95:54:8d:c4:8b:
29:99:de:e9:3d:39:f1:bb:10:a9:87:30:32:dc:19:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38901
131178
137066
138429
sbgp-ipAddrBlock: critical
IPv4:
27.96.84.0/22
43.245.32.0/22
43.252.16.0/22
45.115.80.0/22
45.115.208.0/22
45.118.76.0/22
49.156.0.0/22
58.97.192.0-58.97.231.255
103.9.188.0/22
103.12.160.0/22
103.30.196.0/22
110.74.192.0/19
113.130.124.0/22
119.82.248.0/21
163.47.12.0/22
163.47.172.0/22
202.58.96.0/22
221.120.160.0/22
IPv6:
2400:4880::/32
2404:300::/32
Signature Algorithm: sha256WithRSAEncryption
79:40:dc:41:8b:d7:27:85:ff:82:98:6b:4f:66:d7:f3:fc:08:
f3:76:67:fe:01:14:1a:4f:e9:00:d4:d4:40:d7:d0:8e:9a:e5:
6f:c0:bf:23:33:35:24:65:61:6b:e8:d3:78:2a:5d:5b:03:74:
c9:1a:61:b2:db:83:a9:0f:8e:82:54:db:a2:e4:6e:64:be:64:
19:84:c9:cd:3f:2c:6c:f0:f6:e7:08:20:35:56:5e:fb:c1:89:
8b:b6:02:a1:9c:1e:e4:ce:55:a6:a6:b3:c7:e1:fe:a0:20:ed:
49:c2:df:8f:68:d3:04:1f:76:84:1a:04:0e:98:2e:8c:e6:1b:
ff:88:0d:44:a4:28:ed:e0:25:5d:3f:80:34:70:12:a0:72:08:
e6:0d:9f:9f:3e:13:18:a8:79:07:c9:01:8a:ec:ad:8c:09:0f:
70:09:c1:13:21:2a:fa:ff:21:a3:cb:e3:d8:a3:3e:ed:94:89:
d1:1e:d9:e9:9c:49:99:58:1e:52:96:ae:a4:06:c9:fe:ae:75:
ba:49:e0:ee:f0:13:2d:6a:1a:5a:02:10:e1:05:c7:3d:b5:70:
7c:f9:0f:27:8d:c6:16:11:0c:40:b4:96:4a:3a:d2:50:4f:0c:
11:ae:c9:bf:46:c8:d7:8a:8b:41:07:a7:79:eb:59:f0:a5:c0:
4f:e2:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:23:49 2024 by rpki-client on console-fra.rpki-client.org