Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
File: Sn0mxMvxZwAkXWf79pULcSkYmTk.cer (raw, json)
Hash identifier: aPy7zf/fWClmfnENFikOoP16oj1Zr77WhpZd6rebJa0=
Subject key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 23 Nov 2024 11:15:59 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 151661
IP: 103.253.179.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138538 (0x21d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 23 11:15:59 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:ae:e0:60:f3:c2:f2:f1:e4:c2:cc:21:08:
42:09:4f:27:d6:22:1d:be:cf:ca:66:82:c1:96:f1:
2d:ea:b2:28:64:1f:ee:fc:8f:88:aa:fd:e3:13:98:
0c:7f:e0:d7:48:b1:24:74:a2:f3:72:75:01:92:93:
1d:58:f3:56:79:e6:a9:dd:af:de:70:24:fb:3a:18:
37:dc:43:38:da:e3:92:74:47:3c:41:4b:6d:0b:06:
dc:ec:4d:06:17:4e:64:1f:5b:a8:f6:38:bc:b7:05:
b5:a8:c7:94:5f:a7:7b:08:3b:81:b7:4d:75:c9:7c:
a3:ee:95:28:19:68:e4:74:33:33:82:e8:40:75:52:
90:82:9d:c6:ba:83:d4:19:6d:97:18:eb:b7:c9:71:
da:39:f6:0b:6d:51:63:26:af:67:44:5d:44:a2:28:
3a:f2:23:c3:8c:0b:6b:22:bf:25:ee:ba:d4:6e:2b:
0f:00:98:f7:c2:72:cf:08:13:f2:e6:9a:9f:8f:c9:
eb:1b:1a:be:47:83:54:d7:29:45:d7:1e:27:34:e9:
c0:42:0a:68:c5:c3:e4:a2:5e:eb:e9:52:70:23:7d:
64:bb:df:d9:ac:3f:54:7e:1e:53:e4:ff:31:fb:3b:
6b:11:14:b4:0f:bf:7b:48:e6:9b:59:1d:68:19:31:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151661
sbgp-ipAddrBlock: critical
IPv4:
103.253.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:28:55:3f:7a:77:fe:e5:5d:f0:22:24:ca:57:e0:78:1d:97:
da:03:b4:37:85:7f:2a:d1:df:19:e7:5c:10:59:8a:31:e1:8c:
5a:21:5c:59:0b:36:bc:35:eb:a4:5f:db:fb:b5:2e:a3:81:33:
6c:46:7a:18:c9:b8:be:24:c9:ed:9f:bb:76:5c:6a:21:57:5e:
fb:65:79:ad:07:33:87:0b:61:04:9b:7c:80:72:52:75:6c:f8:
3a:66:32:7b:9e:bc:8c:a7:48:6f:71:3a:5d:25:c9:37:c6:0e:
c4:4e:90:cb:63:49:cc:23:41:7f:64:8a:e7:24:af:4f:b9:14:
b6:ef:db:26:b6:bd:cf:87:72:71:68:d3:5c:f9:98:c3:a4:4e:
8a:0d:0c:d7:86:f1:fc:19:0d:23:aa:42:2f:4a:72:cf:0e:78:
f1:01:7b:e1:e8:7e:19:ea:78:88:5b:b9:1a:db:7d:c4:e8:8d:
d7:aa:02:8c:a2:40:be:3d:f8:7b:2e:8b:4d:bf:a7:2c:e1:78:
3e:b4:e0:d7:ce:69:f8:78:ee:65:90:b1:10:26:8c:8d:32:29:
a8:25:89:fa:c0:95:a9:3b:15:75:29:37:c8:f4:2c:e3:7c:cc:
2e:3c:46:3b:80:e0:ac:6c:de:62:a0:56:f8:d5:29:e9:86:e3:
c8:52:8e:02
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAh0qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyMzExMTU1OVoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODM5Q0YxMTAvBgNVBAUTKDRBN0QyNkM0Q0JGMTY3MDAyNDVENjdG
QkY2OTUwQjcxMjkxODk5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5r67gYPPC8vHkwswhCEIJTyfWIh2+z8pmgsGW8S3qsihkH+78j4iq/eMTmAx/
4NdIsSR0ovNydQGSkx1Y81Z55qndr95wJPs6GDfcQzja45J0RzxBS20LBtzsTQYX
TmQfW6j2OLy3BbWox5Rfp3sIO4G3TXXJfKPulSgZaOR0MzOC6EB1UpCCnca6g9QZ
bZcY67fJcdo59gttUWMmr2dEXUSiKDryI8OMC2sivyXuutRuKw8AmPfCcs8IE/Lm
mp+PyesbGr5Hg1TXKUXXHic06cBCCmjFw+SiXuvpUnAjfWS739msP1R+HlPk/zH7
O2sRFLQPv3tI5ptZHWgZMdX5AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUSn0mxMvx
ZwAkXWf79pULcSkYmTkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgzOUNGLzRERjJCRTUyQTk4QzExRUZCQTA2ODg2NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12
eFp3QWtYV2Y3OXBVTGNTa1ltVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBtMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/2zMA0GCSqG
SIb3DQEBCwUAA4IBAQBPKFU/enf+5V3wIiTKV+B4HZfaA7Q3hX8q0d8Z51wQWYox
4YxaIVxZCza8NeukX9v7tS6jgTNsRnoYybi+JMntn7t2XGohV177ZXmtBzOHC2EE
m3yAclJ1bPg6ZjJ7nryMp0hvcTpdJck3xg7ETpDLY0nMI0F/ZIrnJK9PuRS279sm
tr3Ph3JxaNNc+ZjDpE6KDQzXhvH8GQ0jqkIvSnLPDnjxAXvh6H4Z6niIW7ka233E
6I3XqgKMokC+Pfh7LotNv6cs4Xg+tODXzmn4eO5lkLEQJoyNMimoJYn6wJWpOxV1
KTfI9CzjfMwuPEY7gOCsbN5ioFb41SnphuPIUo4C
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:25:28 2024 by rpki-client on console-ams.rpki-client.org