Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
File: nL-xN0vpMpetwbIdvTeY0VvSdN8.cer (raw, json)
Hash identifier: D/93xffiVOhFQb0HFqzLa5uywed56eeGIRzblllgz7I=
Subject key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A750
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Jun 2023 17:17:46 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 137467
IP: 103.244.184.0/22
IP: 2402:c6c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108368 (0x1a750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 1 17:17:46 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1a:e9:f9:3d:7b:d5:93:50:1e:e8:ec:44:99:
86:fe:91:0c:ce:eb:4b:d0:4e:4b:41:64:6f:30:c4:
13:e8:4f:7e:9c:87:5a:77:fc:e1:d7:db:aa:a7:a3:
59:7d:39:39:99:b5:e0:72:3c:dc:a8:80:19:1e:d4:
43:4c:47:81:9f:a7:d6:77:aa:4d:7a:eb:69:5f:f4:
93:55:b2:ab:d4:14:50:e6:b8:cd:ce:f0:95:34:b4:
d3:18:df:93:05:f1:f0:6d:16:a0:f0:0b:3d:0f:63:
b2:ba:b2:f0:b7:0b:83:2c:d3:fa:f3:4a:1d:b8:01:
ab:99:d4:a2:ef:a1:24:42:52:c0:8b:54:43:36:ba:
d6:1f:c7:29:94:ee:53:1c:26:d2:dc:be:26:68:4a:
e2:cf:de:27:e0:53:46:4e:aa:f1:09:4b:91:81:32:
29:54:af:26:fa:e4:37:11:7f:e2:af:5d:bf:94:a6:
95:df:d3:1f:1f:05:1e:30:ac:c2:92:50:aa:da:0e:
d7:89:54:62:95:d7:39:92:c1:48:19:3f:a0:0b:d3:
e1:6f:a5:bc:a9:cc:53:eb:3e:8e:40:62:e8:93:2e:
80:aa:11:c8:a8:3d:2d:f6:67:8f:89:1c:67:82:10:
a4:d3:1b:0c:76:b7:74:a5:1c:47:67:2b:29:e2:59:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137467
sbgp-ipAddrBlock: critical
IPv4:
103.244.184.0/22
IPv6:
2402:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:23:08:94:43:3d:32:c5:4e:ef:01:fa:4c:98:5e:35:b8:46:
88:b8:08:2b:ec:4c:e6:e8:73:b7:1c:06:46:04:d4:0e:13:02:
9a:00:6b:72:4f:4c:83:00:19:fc:ce:33:ed:e1:5c:b4:20:3a:
62:69:a1:cc:91:08:ad:b5:35:51:14:10:bf:ef:28:6c:fa:3a:
c6:d9:5b:30:d4:32:4c:56:c3:3d:04:53:82:9d:bb:d3:9e:51:
73:8b:dc:25:bc:b6:c9:5c:3f:98:6a:22:4d:c5:10:e4:20:9a:
cd:03:d9:45:5b:e8:68:0d:27:22:01:9b:7e:76:0a:34:14:ff:
9d:c0:51:a5:01:68:17:df:a4:06:62:fc:76:68:90:dc:b1:0f:
fc:79:77:bd:03:0d:10:59:94:94:45:9e:44:19:fb:14:89:5b:
73:6b:5d:3c:c6:0d:9a:86:07:2e:bd:41:89:d5:f2:c8:39:29:
5b:17:ff:f2:0a:9b:55:ba:be:20:31:3d:7c:b8:51:58:ff:ff:
6c:01:66:2b:a6:49:ec:95:c9:fa:7a:c2:00:df:97:9d:ad:60:
01:16:1f:c0:37:5d:86:63:96:58:de:eb:63:b0:1c:76:8a:33:
41:76:41:58:47:7c:77:5f:63:ec:35:f0:47:83:b2:d8:21:61:
21:bd:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:43:11 2024 by rpki-client on console-ams.rpki-client.org