Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.cer (raw, json)
Hash identifier: yDrncAdv7+TXJlHVxzC7NMCS9l1jwqK7Epx29vHD2MQ=
Subject key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C8B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 23:44:19 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 147292
IP: 103.174.98.0/23
IP: 2001:df7:c480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116912 (0x1c8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 23:44:19 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:d4:ec:ad:0f:e0:66:31:d5:05:d1:73:01:
6a:26:7d:f4:27:75:7e:5f:7c:b7:44:ad:e1:72:12:
71:b4:55:ea:13:64:5e:f3:25:cd:3f:d5:c6:10:ac:
19:b3:26:6c:a1:4c:29:d6:d4:36:7d:ea:2c:46:d0:
5f:6b:3e:fb:ef:37:a1:81:b7:68:d1:f5:51:72:4f:
d7:fd:0a:3e:e1:61:cc:2d:b5:3a:de:62:e9:4a:4d:
de:49:fe:f5:73:0f:2f:d2:65:a4:8e:41:3f:d0:9d:
34:19:45:ee:90:ab:f9:c3:90:42:62:0e:ef:15:16:
70:f3:cf:87:3b:18:c6:db:03:c6:12:66:a5:88:1f:
57:c4:e7:32:94:6d:cc:4c:a0:dc:50:60:c6:15:aa:
71:4c:17:62:81:b2:09:cf:db:f7:9f:fd:d7:ca:c6:
15:3c:68:bd:aa:d1:1b:72:c1:13:19:d6:24:4e:20:
b5:cd:44:fa:15:e9:aa:7c:8e:ef:f3:ef:9b:7e:8b:
aa:ea:03:d4:66:e6:50:a7:32:bc:73:3c:a0:11:f8:
24:61:b8:37:7b:14:b8:f5:44:91:fd:2d:77:b5:34:
55:53:e1:59:3e:ee:d2:7f:61:61:c1:17:94:be:3a:
17:9e:76:fc:26:48:72:08:3f:0d:d9:09:4d:cc:d5:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147292
sbgp-ipAddrBlock: critical
IPv4:
103.174.98.0/23
IPv6:
2001:df7:c480::/48
Signature Algorithm: sha256WithRSAEncryption
15:44:f4:58:d3:6c:1c:34:a1:2c:83:1a:e4:9c:fe:fb:7f:79:
18:29:7e:86:e2:76:8e:5c:f4:09:9a:eb:97:0a:8f:c3:94:1f:
19:c2:74:4a:e9:85:68:74:ea:d8:3e:cf:13:fc:3f:b2:a6:d1:
a9:01:89:17:58:b2:bc:d6:19:a1:c9:80:42:70:50:30:29:6e:
63:4b:9e:cb:2e:15:bd:cc:66:55:ab:50:bf:15:77:75:3b:cd:
8d:60:35:80:7d:51:39:32:ce:e8:f4:ac:59:be:7e:28:8b:f8:
e0:11:fe:d0:7d:d9:22:bc:29:93:a6:b3:46:98:69:81:68:bd:
6d:ed:4b:23:e8:a0:dd:3a:18:b3:b4:2d:1a:8d:c5:be:36:a4:
41:01:80:a4:46:92:e8:76:69:fb:52:67:1b:e6:39:1b:3f:5b:
9d:08:e2:2b:27:c9:18:b3:a0:5a:cf:04:1b:21:1b:81:e9:cd:
56:c8:36:6a:39:64:3c:46:08:ba:72:95:f6:d9:b2:b4:1a:e6:
fb:15:ed:e0:5e:aa:c3:98:88:15:d8:1b:5b:bd:25:9d:a7:39:
61:52:d6:4b:5c:cd:ad:5d:32:54:13:a9:ea:6a:16:9c:1c:e5:
cc:30:9e:81:d8:f1:ec:d6:ea:c1:6f:d8:63:f6:76:02:c5:aa:
bc:42:78:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 07:42:28 2024 by rpki-client on console-ams.rpki-client.org