Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.cer (raw, json)
Hash identifier: r9wUggFPJugw06Cf3cMwNpGocC0qMf1H1mACrTS3o6E=
Subject key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EFBB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 May 2024 13:10:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 4739
AS: 4802
AS: 4854
AS: 7498
AS: 7718
AS: 9543
AS: 9556
AS: 18371
AS: 23645
AS: 24037
AS: 37928
IP: 14.2.0.0/16
IP: 58.6.0.0/15
IP: 59.167.0.0/16
IP: 106.68.0.0/15
IP: 114.30.96.0/19
IP: 114.198.0.0/17
IP: 115.166.0.0/18
IP: 115.178.28.0/22
IP: 118.208.0.0/14
IP: 121.44.0.0/15
IP: 121.127.192.0/19
IP: 122.49.128.0/18
IP: 122.99.64.0/19
IP: 124.148.0.0 -- 124.150.127.255
IP: 124.168.0.0/14
IP: 125.209.128.0/18
IP: 150.101.0.0/16
IP: 180.200.128.0 -- 180.200.223.255
IP: 180.222.0.0/19
IP: 180.235.192.0/19
IP: 182.239.128.0/17
IP: 202.0.154.0/24
IP: 202.6.128.0/19
IP: 202.7.144.0/20
IP: 202.45.96.0/19
IP: 202.55.144.0/20
IP: 202.59.96.0/20
IP: 202.71.160.0/20
IP: 202.72.128.0/18
IP: 202.129.64.0/18
IP: 202.136.96.0/20
IP: 202.159.128.0/18
IP: 202.161.0.0/19
IP: 202.173.128.0/18
IP: 203.0.178.0/24
IP: 203.2.124.0/24
IP: 203.2.134.0/24
IP: 203.4.172.0/23
IP: 203.7.0.0/17
IP: 203.10.1.0/24
IP: 203.10.110.0/24
IP: 203.12.52.0/23
IP: 203.13.37.0/24
IP: 203.13.74.0/24
IP: 203.14.168.0/21
IP: 203.15.242.0/23
IP: 203.16.135.0/24
IP: 203.16.208.0/21
IP: 203.17.60.0/22
IP: 203.17.96.0/21
IP: 203.19.70.0/24
IP: 203.20.228.0/23
IP: 203.21.20.0/24
IP: 203.21.78.0/24
IP: 203.22.216.0/24
IP: 203.23.22.0/24
IP: 203.23.72.0/24
IP: 203.23.138.0/24
IP: 203.23.225.0/24
IP: 203.24.207.0/24
IP: 203.25.186.0/24
IP: 203.25.247.0/24
IP: 203.26.70.0/24
IP: 203.26.94.0/23
IP: 203.26.145.0 -- 203.26.146.255
IP: 203.26.206.0/24
IP: 203.27.197.0 -- 203.27.198.255
IP: 203.28.159.0/24
IP: 203.28.183.0/24
IP: 203.29.58.0/24
IP: 203.29.86.0/23
IP: 203.30.206.0/23
IP: 203.31.12.0/24
IP: 203.31.240.0/23
IP: 203.32.137.0/24
IP: 203.33.160.0/21
IP: 203.33.241.0/24
IP: 203.33.255.0/24
IP: 203.34.6.0/24
IP: 203.34.115.0/24
IP: 203.34.186.0/24
IP: 203.34.218.0/24
IP: 203.55.40.0/24
IP: 203.55.63.0/24
IP: 203.55.77.0/24
IP: 203.55.106.0/24
IP: 203.55.157.0/24
IP: 203.55.228.0/22
IP: 203.56.17.0/24
IP: 203.56.30.0/23
IP: 203.56.62.0/23
IP: 203.56.224.0/24
IP: 203.57.208.0/21
IP: 203.59.0.0/16
IP: 203.113.192.0/18
IP: 203.122.192.0/18
IP: 203.129.32.0/19
IP: 203.158.32.0/19
IP: 203.166.224.0/19
IP: 203.173.0.0/18
IP: 203.206.0.0/16
IP: 203.208.64.0/18
IP: 203.214.0.0 -- 203.214.159.255
IP: 203.215.0.0/19
IP: 203.217.0.0 -- 203.217.95.255
IP: 210.15.192.0/18
IP: 210.84.0.0/18
IP: 218.100.50.0/24
IP: 219.90.128.0/17
IP: 220.235.0.0/16
IP: 220.253.0.0/16
IP: 2001:4478::/30
IP: 2001:44b8::/32
IP: 2402:a400::/32
IP: 2402:b800::/31
IP: 2404:b800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126907 (0x1efbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 3 13:10:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:43:0a:7c:c8:e1:ed:42:68:92:a4:8b:3d:
31:4c:41:02:43:ef:c0:a7:6c:74:d2:06:c4:2e:03:
96:00:18:9a:9f:07:24:b6:62:26:37:25:b4:4c:0a:
3f:14:bd:75:48:07:70:d4:3b:8f:69:9f:c5:86:88:
0c:11:5d:09:f4:93:29:41:e8:43:d9:7c:46:e9:f0:
6b:e9:5b:9c:48:fd:cf:fe:85:4b:77:30:db:54:c9:
47:6f:1e:c0:66:18:6e:c6:ee:0b:3b:4e:9e:99:c3:
21:02:51:87:e9:e0:2b:b7:de:bb:ae:3b:4c:9b:f4:
62:dd:73:9f:a1:84:a9:0e:88:f4:91:1f:d8:a6:7c:
fc:08:0e:92:aa:09:24:db:1e:6d:d8:36:90:ea:ec:
b0:28:05:49:62:7a:6a:66:5c:75:b9:89:e0:37:a3:
1b:a7:d8:1c:0d:cd:4c:b2:5b:1b:2b:b4:67:c1:9e:
17:61:55:e6:9e:1e:32:8c:60:f8:44:84:36:f3:c9:
d9:2e:fc:c6:31:33:63:48:24:d8:8c:f9:f5:a5:3d:
e9:d7:fd:1f:3c:8a:49:ac:44:2a:f3:1e:bd:1c:7c:
2d:59:9a:89:8b:b3:14:d2:61:66:54:d4:78:5e:9e:
4d:b1:dd:5e:48:4a:d6:05:bd:fe:e8:92:34:88:90:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4739
4802
4854
7498
7718
9543
9556
18371
23645
24037
37928
sbgp-ipAddrBlock: critical
IPv4:
14.2.0.0/16
58.6.0.0/15
59.167.0.0/16
106.68.0.0/15
114.30.96.0/19
114.198.0.0/17
115.166.0.0/18
115.178.28.0/22
118.208.0.0/14
121.44.0.0/15
121.127.192.0/19
122.49.128.0/18
122.99.64.0/19
124.148.0.0-124.150.127.255
124.168.0.0/14
125.209.128.0/18
150.101.0.0/16
180.200.128.0-180.200.223.255
180.222.0.0/19
180.235.192.0/19
182.239.128.0/17
202.0.154.0/24
202.6.128.0/19
202.7.144.0/20
202.45.96.0/19
202.55.144.0/20
202.59.96.0/20
202.71.160.0/20
202.72.128.0/18
202.129.64.0/18
202.136.96.0/20
202.159.128.0/18
202.161.0.0/19
202.173.128.0/18
203.0.178.0/24
203.2.124.0/24
203.2.134.0/24
203.4.172.0/23
203.7.0.0/17
203.10.1.0/24
203.10.110.0/24
203.12.52.0/23
203.13.37.0/24
203.13.74.0/24
203.14.168.0/21
203.15.242.0/23
203.16.135.0/24
203.16.208.0/21
203.17.60.0/22
203.17.96.0/21
203.19.70.0/24
203.20.228.0/23
203.21.20.0/24
203.21.78.0/24
203.22.216.0/24
203.23.22.0/24
203.23.72.0/24
203.23.138.0/24
203.23.225.0/24
203.24.207.0/24
203.25.186.0/24
203.25.247.0/24
203.26.70.0/24
203.26.94.0/23
203.26.145.0-203.26.146.255
203.26.206.0/24
203.27.197.0-203.27.198.255
203.28.159.0/24
203.28.183.0/24
203.29.58.0/24
203.29.86.0/23
203.30.206.0/23
203.31.12.0/24
203.31.240.0/23
203.32.137.0/24
203.33.160.0/21
203.33.241.0/24
203.33.255.0/24
203.34.6.0/24
203.34.115.0/24
203.34.186.0/24
203.34.218.0/24
203.55.40.0/24
203.55.63.0/24
203.55.77.0/24
203.55.106.0/24
203.55.157.0/24
203.55.228.0/22
203.56.17.0/24
203.56.30.0/23
203.56.62.0/23
203.56.224.0/24
203.57.208.0/21
203.59.0.0/16
203.113.192.0/18
203.122.192.0/18
203.129.32.0/19
203.158.32.0/19
203.166.224.0/19
203.173.0.0/18
203.206.0.0/16
203.208.64.0/18
203.214.0.0-203.214.159.255
203.215.0.0/19
203.217.0.0-203.217.95.255
210.15.192.0/18
210.84.0.0/18
218.100.50.0/24
219.90.128.0/17
220.235.0.0/16
220.253.0.0/16
IPv6:
2001:4478::/30
2001:44b8::/32
2402:a400::/32
2402:b800::/31
2404:b800::/32
Signature Algorithm: sha256WithRSAEncryption
14:d8:b1:94:d3:4a:8e:f9:b4:76:bc:6e:8c:d7:0e:07:2f:bd:
ee:45:87:ff:f2:29:13:b5:c6:a4:e8:89:86:b3:c7:a4:5b:27:
63:5d:1c:66:f4:a8:9c:53:6e:c7:90:ae:99:44:43:46:54:98:
fe:78:52:d9:9e:c6:b7:10:9d:2a:e0:f1:d2:eb:f7:b3:e5:c9:
ef:5f:dd:c9:16:38:72:a0:0d:fe:c2:96:4b:d3:e6:65:83:78:
53:4b:3d:cd:f5:4f:51:57:73:82:2c:13:c5:94:9a:ef:72:54:
ff:df:10:74:d3:bc:b1:68:5b:ea:06:8d:c5:97:07:89:cd:ed:
3a:7e:3d:69:bb:87:79:ec:d7:65:59:86:8e:83:4c:55:65:89:
95:fe:02:4a:e0:42:6f:27:9b:6a:53:51:04:63:e4:ae:31:65:
0c:7c:e4:cd:cb:e6:09:a4:de:3d:a8:e8:c0:0f:9f:9a:15:3d:
b2:41:5b:40:e5:16:b3:21:1c:46:34:c9:ee:a0:45:f1:53:be:
db:c2:0d:34:aa:06:9e:7e:51:a1:ab:6c:5f:4c:47:93:b5:d4:
3e:f9:24:7a:be:3f:54:85:63:ea:49:c9:fd:8d:5f:64:88:30:
bc:d2:7d:c9:1a:37:05:00:9f:d9:c4:f0:21:c4:c3:da:6c:19:
3d:c3:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:56 2024 by rpki-client on console-fra.rpki-client.org