Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer (raw, json)
Hash identifier: lPYeQ+gm/4SHW4j/6CnGumQXUKZNRD9kVGEiImuXTng=
Subject key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FDCF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 17:34:32 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 149838
IP: 103.187.190.0/23
IP: 2001:df0:bec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130511 (0x1fdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 17:34:32 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:b6:7b:ba:28:6e:3b:4b:ad:9d:d8:4a:21:
31:e9:b8:02:38:83:ca:72:4a:2a:54:91:f1:02:56:
2c:69:3f:8d:e3:b0:44:c0:14:f1:dd:c0:c0:4b:fd:
a8:9c:2f:91:b6:9c:b7:75:65:4f:25:a8:4a:c3:58:
27:5a:d9:ca:17:03:87:56:47:e2:74:e7:3d:97:22:
11:cd:2d:de:2f:3f:72:2d:3a:57:1e:a6:d4:eb:67:
eb:0a:3e:47:69:d5:23:db:11:a6:a9:35:4f:89:05:
b6:77:ad:54:df:77:6b:e4:5f:15:1f:78:3a:7d:0e:
01:fc:69:d2:96:d2:65:4b:82:4d:d9:d6:61:1b:8d:
71:0f:72:18:38:eb:21:f2:d9:ac:2c:fa:ad:72:ec:
09:ad:f1:c9:f8:6e:f9:96:1a:c5:8b:d8:c0:55:8c:
20:13:c9:3c:63:5b:0c:24:22:35:2c:b0:3b:46:56:
21:d3:47:e2:65:ec:25:24:4e:2b:bb:fa:2c:bb:80:
5c:f1:6c:54:95:85:86:68:ff:0e:9b:61:19:de:f6:
68:7a:2c:4b:38:70:7b:57:28:a0:5d:2e:7c:bf:80:
97:f0:fc:a1:2f:0d:b3:a5:ee:65:42:5b:0a:6d:ae:
41:db:84:6b:78:5a:44:3c:36:93:34:98:ca:9b:25:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149838
sbgp-ipAddrBlock: critical
IPv4:
103.187.190.0/23
IPv6:
2001:df0:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:76:70:11:7d:3e:dd:e1:21:a9:81:76:47:de:63:a4:ea:86:
57:41:b4:e0:cd:6e:c0:08:83:f4:8e:63:1e:47:70:d4:ea:f7:
3c:d8:03:94:89:16:e0:60:53:dc:0c:7d:98:12:85:a4:1b:7c:
4e:53:78:75:58:f6:36:b2:9e:3a:2d:f3:e4:fd:fe:4f:9b:12:
c2:1e:ce:0d:38:5a:65:02:4f:ef:d2:88:61:26:79:11:c6:25:
73:8a:94:c8:c3:52:14:57:23:21:5f:fa:23:bb:7e:c9:ef:63:
68:9d:6f:0a:71:b1:4c:17:6b:66:61:80:e0:b7:68:21:42:ba:
be:f1:56:bd:10:71:75:ca:ba:d3:e0:68:8b:ca:42:2b:06:45:
79:11:8e:c7:66:7c:7d:84:e9:c8:a9:86:76:3d:74:71:32:0f:
d8:d0:60:9f:68:19:5d:44:29:28:38:db:b9:e3:02:6e:d1:0e:
37:c5:8c:21:ea:d4:a1:56:f2:27:d7:66:f6:45:6a:f8:b2:67:
29:fb:93:84:6f:df:f8:e1:cf:55:48:0c:cf:86:df:07:9b:bd:
64:c3:d2:2a:b2:80:18:28:21:08:71:6d:f9:dc:ec:41:b6:2c:
b2:1b:ce:12:0f:d7:8f:98:6f:19:47:95:9b:f3:11:78:8c:de:
e8:ab:2c:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:36 2024 by rpki-client on console-fra.rpki-client.org