Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
File: peMSM_m0rMgiKz_WfG288kF5CbE.cer (raw, json)
Hash identifier: iVS7kcj6Q7ffKN31hS2QXDK0t8f8tw9HV/c6hF+0v68=
Subject key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 May 2024 14:05:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 138944
IP: 103.137.142.0/23
IP: 2405:6340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126733 (0x1ef0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 14:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:79:d4:a4:42:ee:0b:b4:9d:89:ba:aa:07:
85:32:73:39:1f:00:07:0a:05:47:34:d9:b3:de:93:
1a:f4:2a:e2:2c:a2:60:87:21:87:ba:b0:4f:d6:6c:
83:ee:64:22:54:a0:b7:3f:c1:21:77:1b:dc:af:c7:
10:1f:88:d5:ba:17:db:80:e1:c7:47:e5:dc:a4:44:
c1:10:b8:48:85:6e:27:11:12:12:98:cd:74:64:e7:
cf:14:6c:8f:c8:2f:84:67:03:d0:78:73:99:61:f9:
5c:c6:48:c8:96:06:0c:96:3d:94:c0:0c:d9:4a:67:
d5:3b:14:40:2e:53:d4:f5:52:ee:fe:5c:8f:0e:31:
9f:4d:f5:84:31:a6:17:e5:55:6c:87:c8:1a:bf:7e:
60:13:c6:f3:13:64:0e:c7:9e:32:90:d3:5e:c6:f4:
11:bf:62:bd:42:af:3b:3d:6e:95:2e:64:49:f5:98:
04:7b:c5:37:32:4c:b6:0a:32:ef:6c:29:51:5c:0f:
41:d0:f3:d2:87:9b:64:ba:0b:85:42:f5:da:5e:74:
d9:c5:5e:36:0c:37:5a:79:b0:0e:8d:58:28:ed:9e:
86:2b:23:5d:ac:a7:a7:3b:31:98:ea:10:16:26:37:
d8:eb:8e:78:23:5d:6a:9b:74:95:cf:24:b6:f4:b7:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138944
sbgp-ipAddrBlock: critical
IPv4:
103.137.142.0/23
IPv6:
2405:6340::/32
Signature Algorithm: sha256WithRSAEncryption
d4:be:a6:c0:20:f5:33:cc:42:07:a0:7b:95:3c:19:99:e6:b1:
39:fa:7e:60:89:09:4a:7b:1d:83:c1:46:c0:71:9c:b6:73:9c:
30:11:e6:54:04:d0:af:10:56:12:6e:a9:de:0f:a1:dd:52:1c:
1f:40:72:5c:cd:a9:8a:91:df:27:b5:b5:89:92:e0:c7:48:b4:
c7:70:a1:72:ed:80:6a:09:6c:42:1d:7c:14:76:82:66:be:ba:
5f:ff:09:2b:bd:e5:69:2d:69:4f:40:4a:1e:47:ce:57:68:1f:
82:89:ee:7c:c2:0f:1d:03:7e:65:6a:71:ba:57:94:71:3b:6c:
22:2f:a9:0d:b0:b9:0b:1c:c4:b9:57:c1:72:87:cf:e8:62:19:
a6:79:2a:56:55:c1:2e:d8:cf:9d:d6:6d:74:09:f3:08:3a:48:
13:cf:d6:5b:de:64:3f:cf:bd:da:d6:d6:ee:f7:75:8e:38:c8:
b8:19:77:fe:4f:48:6e:a4:a6:8e:23:19:8b:67:d6:9b:de:84:
74:d9:76:d0:17:32:b2:5d:51:17:c6:ae:df:1d:42:22:c4:e6:
56:67:3f:bd:25:df:d3:ff:8b:1a:08:93:bf:15:3e:25:9a:65:
7b:69:8b:cd:bd:96:d5:be:03:42:39:34:64:9a:0e:46:be:97:
ce:6f:57:01
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAe8NMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUwMTE0MDU0OFoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZE
NjdDNkRCQ0YyNDE3OTA5QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfGnnUpELuC7SdibqqB4UyczkfAAcKBUc02bPekxr0KuIsomCHIYe6sE/WbIPu
ZCJUoLc/wSF3G9yvxxAfiNW6F9uA4cdH5dykRMEQuEiFbicREhKYzXRk588UbI/I
L4RnA9B4c5lh+VzGSMiWBgyWPZTADNlKZ9U7FEAuU9T1Uu7+XI8OMZ9N9YQxphfl
VWyHyBq/fmATxvMTZA7HnjKQ017G9BG/Yr1Crzs9bpUuZEn1mAR7xTcyTLYKMu9s
KVFcD0HQ89KHm2S6C4VC9dpedNnFXjYMN1p5sA6NWCjtnoYrI12sp6c7MZjqEBYm
N9jrjngjXWqbdJXPJLb0t4VVAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUpeMSM/m0
rMgiKz/WfG288kF5CbEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJFNDExL0YwQjAwRUI0MTkxNDExRUE4NkYyNDgxRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9t
MHJNZ2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh7AMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ4mOMA0EAgAC
MAcDBQAkBWNAMA0GCSqGSIb3DQEBCwUAA4IBAQDUvqbAIPUzzEIHoHuVPBmZ5rE5
+n5giQlKex2DwUbAcZy2c5wwEeZUBNCvEFYSbqneD6HdUhwfQHJczamKkd8ntbWJ
kuDHSLTHcKFy7YBqCWxCHXwUdoJmvrpf/wkrveVpLWlPQEoeR85XaB+Cie58wg8d
A35lanG6V5RxO2wiL6kNsLkLHMS5V8Fyh8/oYhmmeSpWVcEu2M+d1m10CfMIOkgT
z9Zb3mQ/z73a1tbu93WOOMi4GXf+T0hupKaOIxmLZ9ab3oR02XbQFzKyXVEXxq7f
HUIixOZWZz+9Jd/T/4saCJO/FT4lmmV7aYvNvZbVvgNCOTRkmg5GvpfOb1cB
-----END CERTIFICATE-----
Generated at Thu May 9 10:10:58 2024 by rpki-client on console-ams.rpki-client.org