Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
File: A47Arrg1DJ2n5vILJtLzULpsJAk.cer (raw, json)
Hash identifier: mvbYbUcJgxAHDAFwdILd4nPsqDlIH97NDl7i/tyADd0=
Subject key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF74
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 12:43:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 134122
IP: 103.105.122.0/23
IP: 2400:eb20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126836 (0x1ef74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 12:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:ec:e3:a7:e8:02:96:e9:16:fe:79:91:dc:
45:85:aa:f4:1d:c0:75:2a:9a:15:bd:d3:79:54:60:
f5:dc:eb:f0:a9:4b:fd:31:3c:7a:ab:9e:fe:0c:c2:
53:3f:91:74:95:b0:32:a0:c0:ca:02:4e:f4:7d:fd:
24:9e:67:ec:e2:06:13:16:55:b5:df:49:77:4d:ac:
ac:9a:5c:70:5b:bf:bb:e1:fd:aa:b2:28:1f:59:d3:
f0:25:20:57:28:d5:d8:4d:1d:90:73:18:2c:8a:0d:
c1:96:19:f3:bf:b3:c7:29:1b:17:de:9a:13:28:90:
ad:78:50:b9:02:28:34:fc:70:52:cd:47:d5:de:e0:
c9:85:17:37:a8:a3:49:6c:fc:09:37:ca:33:9b:26:
32:19:54:71:48:95:16:aa:fe:c5:a6:8a:54:56:5d:
4d:4b:a0:fc:fa:96:0d:36:53:d3:30:cc:53:ab:61:
c6:3c:50:a9:1b:12:8b:ef:7d:56:70:a7:df:ef:6c:
31:4b:03:f6:93:9a:19:39:31:2d:bd:43:77:bd:b0:
29:46:93:cd:ea:0d:d8:75:85:84:f3:91:ab:04:cd:
9d:a0:4a:3d:1c:05:bf:6f:a9:ac:7f:db:76:13:8c:
b7:74:df:6b:ea:8e:ff:42:40:78:28:a3:d8:de:d9:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134122
sbgp-ipAddrBlock: critical
IPv4:
103.105.122.0/23
IPv6:
2400:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
cd:a9:00:ca:8f:55:2c:a8:fd:bd:b0:e8:d5:80:24:41:76:92:
57:25:8e:1a:dd:9c:f7:43:62:9c:cb:91:f0:9a:58:86:46:09:
07:09:67:fd:a6:f6:87:0b:cf:86:94:a7:23:03:e5:f1:0a:3b:
b9:d3:fc:84:09:3b:8b:56:99:ca:b2:70:df:1e:d3:91:23:10:
7f:cc:4a:3c:c6:76:73:38:a1:f5:28:5e:17:8b:de:db:db:59:
98:f6:bc:f7:00:9c:13:b7:c1:68:7e:4a:a1:86:db:b7:00:06:
45:39:53:53:8a:0a:4d:35:46:a5:47:05:fd:46:97:96:69:8e:
a3:de:16:0f:97:4b:39:46:ff:1e:62:2c:e3:28:ed:ea:06:4c:
2e:82:ae:b0:c6:d7:f2:1a:a5:18:b3:2c:98:c5:27:2c:57:30:
b0:44:b6:e9:8d:8c:e5:92:31:ed:14:d0:86:b4:a5:24:83:a6:
22:c4:3c:0d:b4:6d:8e:6b:a1:bc:f6:c7:0f:9c:73:d0:34:81:
46:58:94:ce:8c:a9:3b:62:e2:fd:33:90:1b:c3:4a:9a:ae:7c:
9e:5c:8f:34:67:2f:be:b5:b6:16:6f:93:dc:59:a7:33:62:54:
9a:ba:f7:c5:14:3b:e4:19:fa:ba:08:7a:1b:8d:4a:48:15:83:
94:7f:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:30 2024 by rpki-client on console-ams.rpki-client.org