Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
File: KbnmrAGSmMyglt6Jcancj3144dk.cer (raw, json)
Hash identifier: nlZu7k+wERsEjQJe3SFo3j3VNb9k/aotwa3qXh460nk=
Subject key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02221F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Dec 2024 13:07:23 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 138148
IP: 103.198.68.0/22
IP: 2001:df6:b400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139807 (0x2221f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 11 13:07:23 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91371E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:8c:38:da:d6:ee:4c:59:bf:ad:6c:f7:4e:
9f:79:ec:42:61:69:98:81:02:ed:d5:b8:ed:23:fe:
28:12:36:db:ed:99:37:5b:9b:30:b3:67:52:bb:92:
94:31:05:5a:db:a1:bb:b7:7d:39:f1:d3:17:b8:94:
7e:78:de:45:56:f0:c4:23:e1:e2:ec:4b:8d:9d:08:
19:04:0a:ef:22:ae:80:e8:d3:d8:9e:a4:49:b7:ba:
5e:11:c5:e2:36:f1:29:08:e3:97:c7:42:68:ed:57:
29:b6:ad:01:7a:8c:93:ce:61:81:ad:f2:1b:46:4d:
06:e4:7c:1b:2d:6a:6c:9f:20:5a:fd:f2:e6:9d:86:
f6:16:ac:2e:c0:cd:55:89:ee:24:36:98:45:4a:b1:
d2:76:01:b1:5d:71:8e:18:2f:01:d3:17:af:a4:d6:
c4:5c:25:4b:3d:2a:03:c0:4c:af:60:54:84:da:ef:
b1:be:75:c8:b4:36:55:f7:09:dd:ea:d0:d4:d6:14:
83:6d:ff:2f:f4:47:1d:b7:14:14:5a:90:ea:cc:62:
57:31:b7:f4:12:06:00:58:20:ac:e8:da:f8:37:52:
d4:67:7e:b3:0d:53:06:fe:ad:08:bd:46:82:96:f7:
e0:61:04:92:cd:2a:06:f6:a4:41:0d:23:a6:17:c8:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138148
sbgp-ipAddrBlock: critical
IPv4:
103.198.68.0/22
IPv6:
2001:df6:b400::/48
Signature Algorithm: sha256WithRSAEncryption
38:17:c3:5c:e1:d4:e2:54:0a:16:98:bd:e1:4e:de:53:8a:0f:
93:d4:76:70:c9:7f:e2:50:a7:31:ee:6c:95:48:bd:7a:60:c6:
85:c1:d2:6e:e3:1b:fa:32:f9:dd:b3:c0:8a:9f:d1:a8:98:9e:
33:3a:e2:16:3b:8c:dc:a7:38:0f:66:68:ef:1f:f4:27:ce:51:
35:02:51:95:ea:fa:65:8b:25:b2:f1:b1:08:29:07:c5:c8:a0:
e6:44:42:f1:3e:62:54:9d:fe:eb:ea:b1:e4:bf:c7:0a:7b:2f:
f7:ae:48:2f:99:e2:76:9a:3a:90:a7:e2:8e:eb:b7:00:55:89:
b7:11:dd:b3:c2:c7:46:f9:a5:ae:1f:75:fa:2a:d1:3a:9d:0d:
7a:c2:c1:ab:5d:b6:24:15:c0:ee:12:90:b4:7f:81:18:62:86:
98:b3:76:cd:ea:55:58:80:5d:e1:bb:b0:ff:29:b0:0d:8f:e8:
b0:1b:8b:66:40:e8:2e:db:23:bb:ee:07:da:08:3a:60:27:44:
5c:4f:26:e5:d2:08:f0:24:76:c7:19:78:50:5a:a9:57:56:51:
ff:21:e4:e2:62:ad:23:ea:37:52:34:5b:87:9f:7f:ef:ff:73:
0e:9b:b3:d7:eb:60:6b:2b:c4:35:ac:a7:c2:f3:89:d7:f1:b6:
93:e9:f9:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:04 2025 by rpki-client