Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
File: G1Zt71944xm_wNFADedV4mSoK7w.cer (raw, json)
Hash identifier: IAkGdRYNoKKIwnaEZnrTLWEItTg6YAFu/6+7C8ufDFc=
Subject key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Nov 2023 21:40:10 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137269
AS: 138035
IP: 103.106.117.0/24
IP: 103.120.41.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118137 (0x1cd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 28 21:40:10 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:03:98:70:06:78:5a:86:1e:63:e7:21:31:
49:70:eb:5f:31:8f:2a:92:a9:84:87:fa:9e:76:e3:
99:23:d9:f3:f4:ae:42:b4:2b:08:ab:b5:f6:ec:09:
0f:5f:a6:64:00:1c:d1:f2:a4:0f:fa:6e:aa:d1:96:
88:2b:f8:af:84:1c:f8:08:32:e9:47:9b:32:26:38:
25:3b:71:fe:d2:94:13:3a:4e:f6:e1:fe:ae:ef:f2:
99:f5:9c:62:19:90:19:b5:c3:9e:20:24:87:db:af:
cb:b6:a9:cf:d8:8a:a0:cb:6a:d5:0b:30:05:77:6b:
5a:39:51:70:49:69:90:aa:86:8d:83:32:db:7a:a7:
74:9a:98:fb:c1:69:e7:94:5b:d0:75:ac:0a:09:e1:
34:1b:df:02:95:cb:f3:a5:d7:c7:fc:6a:3d:fb:d7:
77:7a:6f:d7:cd:b0:fc:ac:30:30:e6:43:97:c1:d7:
ea:81:33:dc:e6:c9:7c:a2:1d:cd:c3:24:91:0b:b9:
d5:4d:55:e8:81:2a:de:a6:ee:7a:f5:90:59:f4:75:
96:f4:af:12:9e:65:d6:4c:7a:89:cb:2a:e4:5c:64:
98:f9:c3:da:92:a7:e7:73:af:68:4c:09:14:3e:2f:
8d:14:d8:af:ea:9c:ab:d3:a5:4d:53:8e:ec:f0:a9:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137269
138035
sbgp-ipAddrBlock: critical
IPv4:
103.106.117.0/24
103.120.41.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:04:b9:07:bc:0d:65:1c:d0:d7:b7:e0:cd:62:22:f4:6f:d3:
d4:38:c4:23:d1:76:27:5d:a9:67:3e:87:85:f3:1b:f0:c4:35:
d0:de:b1:29:06:69:95:1d:ac:73:a2:35:23:80:ce:27:02:64:
1f:7b:bf:39:24:63:f3:de:43:0d:9b:9d:e3:32:ee:aa:d3:ae:
96:55:43:12:b2:81:4a:90:b5:91:95:f7:c1:3d:de:e2:f2:20:
95:22:2d:2f:90:ba:ad:9c:ef:44:da:84:60:32:c3:25:73:99:
8b:d4:1c:82:ce:c3:3b:a3:43:0b:c5:94:60:1a:52:fe:0d:d6:
18:d6:c2:4d:d4:be:00:a7:43:df:5c:83:d5:1f:ce:81:5f:9f:
bb:2c:4a:fa:27:99:b3:31:4d:c3:83:0c:c9:9b:7d:82:29:8e:
44:3a:5b:cc:55:6d:a4:1f:c3:58:8c:92:e3:90:54:c9:75:e2:
4a:04:3b:5e:a2:4c:20:62:9e:26:89:1b:94:63:85:17:8d:4e:
66:b2:c7:be:78:66:26:b0:17:fc:cd:d9:24:fb:36:e1:f3:93:
10:79:11:a4:f2:ef:b8:c3:16:1d:18:84:20:bb:68:17:a5:a7:
98:7c:b3:1c:4b:35:01:be:dc:45:3c:eb:8c:8d:e0:5b:3a:3a:
a9:10:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:35 2024 by rpki-client on console-ams.rpki-client.org