Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
File: rC4NP0JyIX_vudMtzhozLelqOF4.cer (raw, json)
Hash identifier: FIfylYRxOTgcV+wF9A87ocaIqfuMB9+qAYqC5/M/6r4=
Subject key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D62B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jan 2024 21:47:17 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 139799
IP: 103.145.92.0/23
IP: 2405:7f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120363 (0x1d62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 2 21:47:17 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:ca:62:52:a0:47:4f:97:81:03:de:cf:da:
7d:3a:b9:eb:35:62:90:62:46:04:32:9b:4f:9b:72:
84:3f:5a:de:6a:b9:c1:a6:d4:91:03:6b:02:a5:ea:
7e:e4:ab:a8:96:34:06:e7:4e:bd:f3:85:a4:94:1e:
e1:ae:5e:40:e6:d8:f0:0a:8e:c9:a8:67:61:5c:75:
99:47:1a:3e:a6:2e:57:29:f4:f7:d1:8d:14:5e:78:
3d:75:6e:f2:91:ec:2a:02:11:7d:2c:4d:52:10:99:
b7:d1:9f:9e:1b:92:3f:ea:a4:db:e4:81:46:96:9c:
b5:7b:56:70:3d:da:c9:c2:5d:3e:ab:9a:a2:88:11:
d5:9e:b4:b8:4b:9a:c5:e2:8e:48:be:bb:a9:c3:40:
67:dc:ce:64:97:b2:e0:2f:65:fb:d8:d0:96:14:08:
d4:b2:81:05:a7:76:af:de:b8:91:d6:23:91:34:38:
ee:c9:48:8c:a8:70:cf:55:8a:5d:c6:18:e0:04:e7:
c0:e0:57:e8:d1:e1:9d:7f:fe:ec:85:22:f0:6b:d1:
57:3c:9a:c3:2c:f1:b1:d5:7d:92:4c:77:6b:1b:98:
12:d4:d1:5a:db:0d:08:0d:a9:16:ce:b9:a2:e9:8a:
c6:c7:1f:76:36:40:e3:c2:97:44:68:a8:24:bd:94:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139799
sbgp-ipAddrBlock: critical
IPv4:
103.145.92.0/23
IPv6:
2405:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
bc:3e:98:62:12:d6:02:d4:36:d0:35:f6:19:77:e4:d7:d2:08:
73:36:ab:1a:d3:52:c4:d4:9c:be:ed:d8:1d:a2:2b:d7:4f:b9:
1e:ee:95:d2:ac:35:1a:ba:72:6b:4a:6f:fe:bc:5b:3f:d6:29:
d2:99:82:69:5d:87:c7:5e:b2:9a:53:d7:fe:53:e5:9e:3c:d9:
77:b8:09:2b:91:7b:fa:9a:51:4c:9c:2e:10:88:02:dc:f9:14:
2f:c8:a8:a6:3c:67:95:2b:59:a3:19:fd:ae:68:14:f1:37:dc:
33:a7:3e:d9:78:33:5a:6e:13:ef:e4:5d:33:b2:e0:4f:0d:9f:
34:8c:b8:0c:29:41:a5:f5:84:c6:60:49:2d:df:e4:07:68:a0:
a1:4c:d6:ef:6c:d0:bb:19:51:6a:fd:0e:4a:40:a3:c5:96:38:
da:1d:ac:45:f0:95:f4:8b:89:de:ae:f9:3e:73:f4:a2:69:0b:
89:9c:d0:33:1b:21:8d:e3:f2:25:d9:54:9d:7d:70:09:04:3a:
ab:66:20:61:b4:e3:49:73:6a:80:e6:8a:f5:10:c5:7b:0f:6a:
7c:c1:04:4a:7f:e5:bf:aa:03:17:97:f2:db:1d:b3:91:36:33:
cd:bc:f2:ca:81:73:0e:23:ed:00:68:3a:db:ed:4a:78:c1:20:
a6:c6:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:43:17 2024 by rpki-client on console-ams.rpki-client.org