Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
File: hUw8jb_u2qy7OypCS1iyWaFMnws.cer (raw, json)
Hash identifier: 8DfZ86o4olkI9c2yYoq/WIu+/1higq04U6sRUKkBJlE=
Subject key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EFF7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 May 2024 17:28:27 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 150726
IP: 103.74.10.0/23
IP: 2001:df1:dd40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126967 (0x1eff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 17:28:27 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:12:c2:03:ff:e9:8a:4e:19:c9:27:87:69:
e0:96:13:bc:ba:20:dd:6a:69:08:00:78:74:a9:2d:
31:ab:38:9a:54:35:07:7a:3f:58:dc:7c:9b:8f:47:
76:c2:d0:53:ab:f0:06:66:ff:e1:46:fb:a9:04:34:
8b:8f:eb:86:bb:ae:1f:f4:0c:b3:cc:44:d4:9d:3f:
07:12:18:d2:4b:a2:d1:24:68:3e:a1:a7:9c:e8:12:
1e:3b:0b:51:0d:92:d4:6b:47:20:c5:06:98:6a:0c:
f0:d3:09:09:6f:61:b9:fb:ce:c4:b1:74:a0:30:89:
6e:fc:55:9d:db:54:d7:ee:e9:1e:dc:29:18:7a:ea:
85:10:dc:39:89:75:44:0e:42:e5:dc:08:aa:cd:ad:
8d:1f:64:d1:89:ab:a7:42:6c:b5:bf:ef:09:3e:c5:
da:b0:d5:9d:3a:a8:5a:4b:9e:fb:04:5d:6e:8e:22:
71:c5:09:5f:ec:2e:d7:93:bf:01:74:3a:f7:57:cd:
bc:48:3d:0c:b1:4f:78:40:bb:74:ad:11:09:27:a7:
52:52:e8:bc:fb:20:29:5e:93:b9:fb:d7:d3:76:69:
b6:31:48:10:b6:67:03:d8:65:75:bb:17:ee:1f:03:
d9:52:de:dc:6e:cd:88:bd:32:de:20:b8:70:01:22:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150726
sbgp-ipAddrBlock: critical
IPv4:
103.74.10.0/23
IPv6:
2001:df1:dd40::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f7:24:17:f3:ce:f6:df:cb:6b:09:36:bb:85:cd:db:4e:47:
50:6f:d1:a4:c3:76:ea:82:75:00:f9:4e:21:30:07:75:64:05:
19:af:01:84:d6:7d:d5:bf:69:af:48:bf:4b:15:00:5f:5c:ad:
79:21:65:16:49:a1:b7:c7:c2:e9:66:d8:a7:93:f3:f0:18:74:
bb:b9:c4:4d:31:b9:8c:f9:4a:3f:a9:65:64:50:9d:95:d6:69:
f6:c1:16:5b:6a:24:5f:3c:ad:44:9b:e5:43:37:6d:af:55:d2:
a9:61:6d:a9:b0:93:91:7c:49:cd:75:fa:75:c3:b8:26:83:bc:
18:d6:56:a2:92:22:28:b4:f5:cc:d9:ca:c8:13:33:74:9c:dd:
2c:99:69:f3:88:6c:45:a0:bb:78:5c:22:f7:4d:0b:72:39:22:
15:c1:14:03:91:2c:eb:0f:73:ed:c8:f0:64:c3:2d:8e:84:24:
d4:09:b4:9a:a7:11:78:ed:7b:cf:07:29:09:0e:8a:fc:53:7d:
c5:01:17:54:ef:3f:25:88:c6:09:7e:57:80:73:85:4d:ab:4f:
81:bc:86:02:21:fa:78:ae:8f:11:42:d1:d4:01:fb:a7:e4:ae:
0d:1b:c9:d9:13:d7:c6:66:59:bd:6b:58:22:a6:b5:f0:60:ce:
36:57:78:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 10:24:32 2024 by rpki-client on console-fra.rpki-client.org