Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.cer (raw, json)
Hash identifier: jf/0Ix6aD8sKfyvn1v9bWG28n9oKddHftarj8v+Gymo=
Subject key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DFBB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Feb 2024 01:09:56 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 138543
IP: 103.132.168.0/24
IP: 103.148.60.0/24
IP: 2001:df7:8100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122811 (0x1dfbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 20 01:09:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:68:0a:0d:ff:d9:c1:07:85:50:ce:30:b9:
81:15:dd:c0:cc:9f:1c:94:b5:84:20:00:ec:ae:f1:
a6:fc:21:6b:27:c6:4f:b4:e2:c2:9a:43:8e:a0:95:
47:5f:d7:06:03:ad:eb:10:4f:76:a4:c0:13:11:80:
5b:ec:7f:f9:6a:5d:70:07:c8:b1:9c:87:e5:dd:20:
ad:47:13:a1:69:b7:a9:1b:07:38:b0:59:d4:59:18:
c0:a9:6f:de:41:9e:fd:d8:f6:1d:da:c0:d8:57:e3:
23:b1:39:18:d8:fc:7c:e1:e4:55:65:16:11:eb:e5:
f8:3e:cb:c1:46:66:e4:57:a2:4a:d5:dd:5d:fa:43:
6a:6c:0b:5a:31:85:23:5f:90:46:2c:4a:e9:37:9d:
7e:bb:6e:dc:a8:f5:d2:6a:b2:60:4d:8a:6c:b9:d8:
97:90:d2:35:7c:d9:25:a8:4d:10:e7:d2:54:42:6d:
62:30:c5:64:10:e7:59:26:f7:26:80:8a:4e:85:89:
e8:8c:87:06:b5:a8:8a:89:a5:74:37:18:63:62:62:
6d:c1:58:84:30:aa:33:ee:ad:46:97:54:eb:23:74:
3c:c0:be:77:95:56:7a:a8:b5:d9:e2:b4:b8:01:82:
58:5c:ce:05:8f:f7:74:ef:07:63:cb:0b:c7:3d:e2:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138543
sbgp-ipAddrBlock: critical
IPv4:
103.132.168.0/24
103.148.60.0/24
IPv6:
2001:df7:8100::/48
Signature Algorithm: sha256WithRSAEncryption
a8:0a:14:a2:51:44:39:e7:34:a2:5e:f8:7b:31:c3:ad:7c:53:
52:e0:85:58:e5:af:06:03:62:e2:37:ae:54:7d:0d:9f:6f:57:
d1:74:e6:25:0f:cb:ce:29:c7:54:2d:43:fa:2c:b8:26:3e:d1:
21:e6:a3:bd:7a:0c:3b:1d:ec:e4:7c:b1:c6:a8:f8:b0:63:16:
ac:c7:ae:4c:e1:c1:a7:8e:ef:43:c6:e6:8b:21:1a:6d:ad:08:
c3:ed:d6:de:23:d8:7b:40:84:64:45:bf:2e:da:e0:9e:55:7c:
b0:80:6f:3e:a3:bf:bc:ea:4d:f2:c1:24:e1:e9:b2:9a:0f:83:
74:53:40:20:f0:b2:25:4a:f3:de:87:04:d6:93:ca:f2:69:1e:
10:8f:b0:c4:84:28:38:63:2b:b6:4e:8a:8a:45:c5:95:43:2a:
c7:d3:b3:16:1b:4f:b3:73:6f:bb:96:9e:13:4c:f4:4c:07:23:
6d:cf:27:31:4a:eb:33:49:43:ca:2b:e6:08:c6:f6:9f:19:68:
1e:ae:33:51:e5:bc:5a:e9:3a:a7:a9:90:8e:2f:8d:4b:8c:a0:
a2:19:31:05:70:d4:f0:2c:b0:10:e5:b6:56:1c:36:8a:18:9a:
63:c5:33:e0:bc:a1:c1:95:90:80:71:75:55:15:9d:48:b8:ce:
9d:44:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:24:18 2024 by rpki-client on console-fra.rpki-client.org