Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
File: Yr76HCON-N6XLqX-GAl7ES7wR3s.cer (raw, json)
Hash identifier: ykDlMKg2DybI3jmLQeL3SCTw6GM29Aq/JXdc1u0ttLw=
Subject key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E252
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Mar 2024 13:54:44 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.80.170.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123474 (0x1e252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 13:54:44 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:7c:21:7e:fe:af:b0:d4:a2:03:97:0a:94:
1c:11:6f:0c:e0:7e:24:05:34:08:5a:56:b6:d1:1f:
4c:60:9e:35:56:58:07:1e:28:96:f1:80:6d:46:d3:
b2:37:d7:72:e7:02:70:14:ad:3f:7f:7d:c3:67:f6:
f1:73:38:e9:be:66:b0:17:db:07:1d:8d:0a:8a:35:
d9:ae:b5:90:2e:07:03:b6:1e:77:5b:f9:e7:b8:76:
f9:bf:70:3e:98:70:6b:ef:4b:73:d7:6e:14:c2:59:
f7:57:a5:ed:c5:3a:e3:e8:1a:5f:c7:9d:da:e9:ba:
07:05:34:c3:a3:e2:84:d0:9e:c9:01:9b:e3:79:51:
6c:be:00:fa:39:35:ae:74:41:e1:1c:31:e0:ad:39:
03:fe:2c:1c:11:2f:74:9a:2c:6a:16:ae:b0:cd:fb:
0d:46:6c:7e:dc:0a:bc:1d:fe:a9:2e:54:a6:2e:d0:
ba:d6:a4:c9:73:06:57:e9:7f:97:b4:b4:12:e3:56:
8b:26:ce:11:8e:10:03:92:2d:6c:ef:c7:4d:bc:34:
f7:c4:16:ad:35:9d:84:6d:23:e9:91:89:c1:12:31:
c6:52:5f:19:b0:b7:61:07:f7:f8:2d:97:af:ee:4d:
4e:97:7f:f5:e6:4a:1b:6f:84:bc:80:1d:97:ae:40:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.170.0/23
Signature Algorithm: sha256WithRSAEncryption
63:9e:e9:f8:32:7f:76:44:93:06:dd:7c:74:77:21:be:5a:74:
a8:de:82:16:b4:7c:30:8a:9a:37:ba:b7:d4:52:9a:6e:6c:04:
bd:7d:02:e5:b6:ba:6e:9c:03:b3:aa:5c:e6:78:0e:44:c9:fa:
b1:ae:20:bc:60:a2:72:8e:91:cc:28:30:e1:7b:fc:70:64:6e:
d4:29:de:7a:de:e2:47:19:57:2a:35:33:4d:93:20:cb:dd:02:
35:26:b2:6d:11:64:04:29:5f:2e:94:62:b9:b8:46:75:a3:27:
74:ac:e7:2f:31:d4:3f:d1:dd:8a:ab:bb:76:5f:5b:5a:51:ef:
c9:31:4f:03:e7:e2:b6:e7:c7:bd:98:4d:dd:fd:19:e8:e8:21:
52:59:c0:41:93:41:d7:51:0d:d9:b0:f5:38:58:6b:56:ba:6b:
19:f8:0f:e6:7a:a7:02:e4:b0:8b:7a:39:46:80:c8:bf:1e:94:
c3:35:d2:40:48:f8:bc:8f:b9:d2:a8:c7:6b:fc:5c:04:5e:b0:
20:19:6e:73:3c:db:ee:9a:d2:cb:69:12:c0:49:6c:42:03:c2:
7d:c6:de:00:66:a7:bd:47:66:bf:f1:8d:58:b9:f8:47:f2:e2:
6c:a3:6e:e9:65:4c:6c:47:04:00:d8:7b:02:a8:d0:3c:d9:66:
63:14:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:46 2024 by rpki-client on console-ams.rpki-client.org