Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer (raw, json)
Hash identifier: x4sm4xE/DLBr3bBatQf57V3BiA2g32G4gTJwgqZO1nU=
Subject key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F00A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 05 May 2024 17:40:44 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 138925
IP: 103.137.72.0/22
IP: 2404:ac40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126986 (0x1f00a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 5 17:40:44 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:ea:34:b2:b4:d5:9e:6f:ed:98:9e:b1:fc:
97:fd:1c:60:0d:26:15:db:98:00:4e:b4:5d:8e:a2:
10:6a:a5:b7:37:d2:87:46:f3:28:62:e7:cb:2b:0e:
a3:a3:da:75:bf:2c:79:5b:32:94:5e:7a:33:0c:34:
22:73:05:a7:2f:40:e0:83:7b:87:8b:f7:56:17:bf:
9c:2c:f6:a1:77:04:94:1f:b1:92:24:0d:cc:c1:36:
4f:56:27:37:2d:2b:13:5b:59:0d:7a:b2:76:e0:6d:
c8:96:ae:24:9f:ed:3d:eb:7d:16:19:32:fe:1f:38:
ff:9f:51:ee:e5:e1:59:15:30:87:50:60:23:b5:29:
78:12:9e:d1:40:56:e4:c3:ce:be:ac:c7:46:ce:d4:
a2:75:79:a5:9b:4e:37:6f:de:2e:34:93:b6:47:cd:
d7:b4:5d:38:ec:f7:39:a9:92:62:02:64:68:73:f6:
36:21:dd:cf:af:be:c8:47:61:cb:f3:f9:04:71:e5:
d1:b4:7f:18:19:d4:54:8d:da:50:f1:dd:93:33:f1:
04:14:2a:84:28:5a:1f:69:f3:29:9d:56:88:00:c6:
0d:c1:81:f4:6b:7d:1d:f4:d8:5c:59:be:bb:de:ef:
a1:a2:ab:6f:18:c8:f0:65:6d:68:75:0b:53:e5:ad:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138925
sbgp-ipAddrBlock: critical
IPv4:
103.137.72.0/22
IPv6:
2404:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
cc:7a:de:61:96:c8:a3:cf:74:e7:18:c2:04:bf:10:1e:43:25:
37:63:cd:90:c7:a9:2a:1d:82:86:e8:24:ba:f2:75:43:a3:92:
3f:a3:10:40:1f:ed:a4:68:c9:9d:b0:ba:1f:30:d4:2d:f5:52:
2a:04:5e:64:93:25:99:24:4a:a9:2d:0d:d2:00:af:51:77:17:
24:b9:b2:cb:c1:db:0d:43:9f:e3:e7:05:26:0b:93:4c:0b:ee:
3f:e1:7d:0b:dd:a3:49:7e:42:09:df:22:ba:a1:9a:0e:a7:85:
9b:55:ac:50:14:3a:29:37:1f:be:29:4c:2d:f3:55:fd:e7:42:
80:ff:53:ba:7f:06:69:3a:b8:d3:a8:31:bf:d2:5e:e9:0b:30:
c8:20:af:9d:10:12:85:35:78:8f:4f:23:ec:c9:64:cf:61:bd:
e9:1b:ae:67:31:eb:a3:a9:7d:a8:d5:2c:bf:a6:f3:fc:06:c8:
40:bc:8d:15:2e:4d:82:f1:35:51:fd:41:0c:0a:d6:fe:41:ce:
18:87:ea:31:0b:d1:34:cd:93:02:72:59:00:65:38:a8:c8:fd:
92:dd:4c:37:5c:2c:eb:2d:96:dd:de:90:22:68:c7:d8:f5:1a:
04:7f:2d:4e:df:48:2c:f3:1a:78:16:27:f2:94:43:34:d3:a6:
1b:24:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:25 2024 by rpki-client on console-fra.rpki-client.org