Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
File: fd08hfmnH2JfzMEMqDHld3CbTz8.cer (raw, json)
Hash identifier: /3U1mkPQqvAhwWVymExg7pby54UNAddZEW+C5pJjmwU=
Subject key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A59E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 28 May 2023 15:48:41 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 149815
IP: 103.186.252.0/23
IP: 2400:7760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107934 (0x1a59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 15:48:41 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:00:69:ad:b2:03:35:44:63:50:e6:0e:35:
a0:af:e2:82:b2:bf:ae:a5:94:1e:1d:e2:e7:ec:4e:
56:20:f3:f8:2d:a7:99:ed:9c:e3:b8:c4:d5:c8:38:
9c:45:51:49:91:2b:05:01:8b:a3:69:4a:56:bf:7c:
a7:b2:4f:b3:5d:c7:d8:96:63:26:2d:43:39:02:8f:
2f:2c:ab:38:69:12:ef:ec:64:cd:f2:04:42:80:82:
3d:08:64:ac:d1:ad:a1:76:6e:ee:b7:c1:1e:c9:c3:
cc:ca:53:14:7d:8e:2d:73:db:c2:ee:18:ba:e6:4c:
34:51:b2:2f:89:14:aa:fb:ba:a4:d0:8c:d6:ac:b0:
a6:aa:eb:4a:62:7e:0a:ef:32:88:5d:55:72:15:8d:
5f:eb:1d:f2:8c:c9:fa:14:77:11:4b:ab:95:32:33:
ce:27:9d:60:e4:5f:9a:95:58:ba:98:62:61:3e:d8:
cb:7b:d8:b7:c3:47:b9:f0:2a:37:f8:36:b1:b4:ae:
df:6f:11:56:cb:98:eb:78:d9:38:b9:57:76:48:4b:
77:bf:aa:04:b0:d9:1f:50:f9:23:c9:68:d8:95:8f:
da:13:87:c5:a6:31:10:26:5d:0f:87:d5:a7:50:21:
ce:8c:9d:78:8b:19:1a:2b:29:38:45:8b:23:de:ea:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149815
sbgp-ipAddrBlock: critical
IPv4:
103.186.252.0/23
IPv6:
2400:7760::/32
Signature Algorithm: sha256WithRSAEncryption
9b:5b:30:b8:62:08:7f:fa:eb:89:8f:e9:6a:e0:36:f7:ec:ed:
9d:2b:d1:37:39:fb:d5:75:59:16:ef:95:52:e8:0c:00:8b:6e:
e2:a1:10:0d:a6:72:f1:0d:ad:16:71:d6:c9:f2:92:58:e6:6e:
46:09:8c:e5:67:7d:00:b7:8b:5a:ca:ef:7f:ab:ba:69:82:8f:
47:64:3c:93:bf:2f:43:0f:1c:5a:11:8a:9a:41:15:ce:d3:e1:
a5:65:44:d6:81:3e:fe:fc:be:7f:33:c5:50:5f:47:f5:68:cb:
b3:a6:fb:f8:68:13:cf:2f:86:15:ae:99:8a:61:9a:fd:a0:a8:
b4:44:f3:57:40:e4:8c:4b:0b:28:3d:39:29:8c:b5:94:d8:8b:
5e:5d:20:e6:35:bb:b9:6e:99:0f:9c:94:34:d8:1a:3c:c9:35:
a7:75:35:8f:9d:ae:f6:b4:35:b1:f0:4a:cb:4a:5c:7b:4a:3a:
2f:b9:2d:6c:5d:e2:eb:30:ff:b3:13:9f:79:1e:aa:7c:29:f7:
76:46:d0:36:82:3c:5b:1c:2b:33:9f:c8:31:aa:cf:4f:2d:43:
4b:3c:bf:19:7a:13:6e:a8:65:36:80:5f:a8:37:a8:f4:95:71:
92:7a:3d:cd:b3:01:fc:b9:58:b4:db:0a:8e:aa:76:93:c8:25:
f0:95:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:52 2024 by rpki-client on console-ams.rpki-client.org