Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer (raw, json)
Hash identifier: ctbxMYMmTKbbsZo97NQV1h+dgb0531Vg5ZjmaDL0He8=
Subject key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD08
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 12:28:04 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 38307
AS: 38858
IP: 103.105.144.0/22
IP: 115.124.0.0/21
IP: 124.158.16.0/21
IP: 203.29.67.0/24
IP: 2401:8c00::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118024 (0x1cd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 12:28:04 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:9a:66:2e:16:29:70:a5:63:ec:08:7d:87:
d6:42:d2:26:b6:86:33:31:07:15:3b:e2:0f:5e:66:
1d:55:26:4a:5f:eb:93:d7:16:9a:69:d5:f4:25:c3:
5d:39:d3:6f:ef:71:33:26:14:8c:86:bd:7c:89:b6:
4a:1d:c5:6f:a8:2c:55:2d:7b:f7:5d:7e:d6:d4:14:
f2:7e:17:36:06:ab:80:9e:99:0a:bf:e6:f0:7a:f1:
c3:55:cc:8d:48:6f:49:71:ee:3b:e8:0d:12:28:78:
52:98:b9:b8:55:06:90:af:da:4b:e7:e0:08:39:99:
d0:fb:57:a4:6c:64:61:9f:d0:6d:4d:4a:89:22:55:
f5:a1:a4:1c:24:f8:c7:15:b3:ec:d4:84:57:9c:01:
4c:ef:34:ba:c1:3b:cb:ad:d4:b4:c7:cd:f7:7b:52:
a0:f9:9c:9c:a0:6f:03:7c:e7:99:93:9f:dd:1b:d8:
30:ec:f0:e9:65:69:8e:ae:17:61:b1:22:12:ae:89:
4f:33:1f:36:33:00:69:2e:01:b5:86:fa:02:c3:01:
24:28:c9:28:7f:18:cd:0a:9b:cf:30:5e:c8:0b:34:
fe:c6:63:52:59:51:7b:46:cf:74:f7:70:02:fe:c8:
30:cc:f8:a9:b4:79:e9:f7:ac:4e:ab:4e:dd:9c:00:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38307
38858
sbgp-ipAddrBlock: critical
IPv4:
103.105.144.0/22
115.124.0.0/21
124.158.16.0/21
203.29.67.0/24
IPv6:
2401:8c00::/31
Signature Algorithm: sha256WithRSAEncryption
23:87:49:51:4b:6f:af:2b:14:e1:96:91:17:fa:bf:be:e5:a4:
9f:a2:5f:45:80:af:28:17:bb:da:39:a9:21:b7:8f:98:01:e1:
34:e0:9b:6b:6b:b0:01:fc:f8:b0:1d:d0:6c:55:1f:69:f1:07:
73:47:90:02:04:45:dd:6f:51:88:23:e0:ed:2b:51:d9:71:2d:
81:ed:2c:f3:27:33:58:3a:d9:38:09:f1:84:22:7a:17:87:ac:
e5:ab:52:3e:6a:13:42:bf:c5:e6:2b:29:b3:24:ee:d1:95:67:
ee:b6:d6:de:54:6c:4a:65:1e:71:22:a8:40:4a:f4:bc:07:c1:
63:99:c4:9f:dd:e3:fd:92:45:6c:d8:4e:23:d9:e1:b2:64:dd:
4c:10:7e:4d:65:66:53:57:40:01:12:0a:ab:bd:b5:26:43:32:
45:ff:3d:32:24:3f:cf:e4:61:d6:99:78:24:47:29:ea:41:1e:
14:8b:e9:66:16:f4:43:fc:ad:60:35:73:fd:fc:5d:b1:5c:ed:
9c:29:6d:71:83:fa:47:d2:25:2e:a0:de:14:a3:a6:07:90:50:
00:d3:66:73:c1:cc:8b:2e:11:f7:7a:95:23:60:b0:c1:ab:05:
c8:dd:d9:19:a5:29:51:ec:b8:ee:f0:64:f0:7e:68:b0:88:34:
ef:1d:9f:27
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIDAc0IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyNzEyMjgwNFoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3
QzY2RkM1QTNBNjU4MjIzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9UppmLhYpcKVj7Ah9h9ZC0ia2hjMxBxU74g9eZh1VJkpf65PXFppp1fQlw105
02/vcTMmFIyGvXyJtkodxW+oLFUte/ddftbUFPJ+FzYGq4CemQq/5vB68cNVzI1I
b0lx7jvoDRIoeFKYubhVBpCv2kvn4Ag5mdD7V6RsZGGf0G1NSokiVfWhpBwk+McV
s+zUhFecAUzvNLrBO8ut1LTHzfd7UqD5nJygbwN855mTn90b2DDs8OllaY6uF2Gx
IhKuiU8zHzYzAGkuAbWG+gLDASQoySh/GM0Km88wXsgLNP7GY1JZUXtGz3T3cAL+
yDDM+Km0een3rE6rTt2cAEq5AgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQUQXbxCRjJ
sY0t74t8ZvxaOmWCIx4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE0NEFCLzVFMEFBOUEyMUQ5NTExRTJCNEVFMzM3RDA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1Jq
SnNZMHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAJWjAgMAl8owQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJnaZAD
BANzfAADBAN8nhADBADLHUMwDQQCAAIwBwMFASQBjAAwDQYJKoZIhvcNAQELBQAD
ggEBACOHSVFLb68rFOGWkRf6v77lpJ+iX0WArygXu9o5qSG3j5gB4TTgm2trsAH8
+LAd0GxVH2nxB3NHkAIERd1vUYgj4O0rUdlxLYHtLPMnM1g62TgJ8YQieheHrOWr
Uj5qE0K/xeYrKbMk7tGVZ+621t5UbEplHnEiqEBK9LwHwWOZxJ/d4/2SRWzYTiPZ
4bJk3UwQfk1lZlNXQAESCqu9tSZDMkX/PTIkP8/kYdaZeCRHKepBHhSL6WYW9EP8
rWA1c/38XbFc7ZwpbXGD+kfSJS6g3hSjpgeQUADTZnPBzIsuEfd6lSNgsMGrBcjd
2RmlKVHsuO7wZPB+aLCINO8dnyc=
-----END CERTIFICATE-----
Generated at Thu May 9 10:10:42 2024 by rpki-client on console-ams.rpki-client.org