Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.cer (raw, json)
Hash identifier: l78EYZkBYI8IkL/Ymz75aHpsUBu9WT5YXyYFnxvn7bQ=
Subject key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E498
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Mar 2024 20:32:59 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 56198
IP: 103.68.125.0/24
IP: 103.75.175.0/24
IP: 202.0.104.0/24
IP: 2001:df6:bb00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124056 (0x1e498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 14 20:32:59 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:97:5f:7c:85:bd:fa:a9:7b:63:86:72:7a:
9d:43:f8:ec:48:ed:5f:28:33:b7:d1:8f:59:7b:46:
d5:bd:05:bf:2c:8e:c0:32:0f:5e:9c:e3:13:f1:c0:
29:a6:2d:8d:7d:6e:10:16:d1:b0:72:d4:4b:b6:22:
eb:cc:f2:66:7e:e1:43:27:c7:98:05:a2:39:ff:b4:
01:a1:23:02:7a:0d:cb:f9:e6:26:ea:c2:bc:3b:98:
39:7b:2f:51:e2:c9:41:00:c7:91:2e:47:fb:72:1e:
35:85:22:6e:5d:c6:d1:56:60:4b:80:ce:f1:37:75:
f4:96:ce:3c:2f:2a:86:2b:ed:1d:bd:54:18:8e:97:
c8:80:cf:58:66:c2:00:5f:4d:d1:40:2d:43:60:e4:
78:3a:48:0a:22:bb:ac:18:fa:a9:30:8a:43:94:8e:
d3:ed:72:18:de:7b:1e:95:6f:01:0f:f1:3a:ee:b9:
c9:3a:d0:39:c5:2f:3a:ce:5d:d4:7e:a6:a8:b0:5a:
0f:9f:20:7e:73:f1:64:5a:e4:8b:54:bb:36:77:e8:
85:36:e5:45:ff:3f:c0:ea:5b:6d:f8:98:01:0e:63:
d3:3e:e7:28:bc:c7:69:2c:24:11:d8:13:d9:e0:80:
e1:ae:46:98:6f:57:00:c3:19:d2:83:16:96:ba:a9:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56198
sbgp-ipAddrBlock: critical
IPv4:
103.68.125.0/24
103.75.175.0/24
202.0.104.0/24
IPv6:
2001:df6:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
97:60:3d:54:c5:36:3a:ab:03:7e:9e:36:b4:01:3f:64:ea:12:
a2:ac:e9:02:28:1d:b4:de:94:04:9f:be:44:91:19:66:df:a1:
fd:cc:a3:8d:9f:f6:3c:7e:37:5f:2c:f2:71:f0:44:2a:9e:6f:
c7:a3:a8:82:eb:44:fb:dc:18:68:40:a0:3b:32:fe:90:4c:ef:
60:6c:9d:74:e3:ef:ec:d0:4c:0f:d6:25:f7:f4:b7:1f:d1:8e:
df:14:79:bc:71:0c:9c:40:13:e6:6b:19:fd:57:1e:a4:09:bd:
88:50:27:25:d0:d4:32:0a:2f:0a:40:8c:71:89:b4:8f:79:26:
fa:b9:db:f0:ce:21:f8:ed:4a:44:98:78:bc:42:0b:f2:2e:b0:
63:cf:ba:33:ce:c1:fc:27:a4:39:4d:62:08:ce:f6:0a:b1:bb:
99:3e:61:37:7d:62:98:4b:94:d2:64:6f:86:d0:1f:ee:6d:42:
3b:6a:c0:64:3e:7a:99:a4:e8:79:7e:71:7e:b0:6b:d8:ee:7d:
d8:07:10:56:0c:c2:40:5b:38:c1:ba:4f:9b:5c:18:60:ce:6f:
67:29:3e:36:36:b3:f8:c2:24:99:fb:43:f0:ef:6f:b8:eb:47:
f0:6d:e6:cc:5d:2d:d3:f5:8c:db:2e:ec:28:2d:10:11:1d:aa:
27:e3:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:14:23 2024 by rpki-client on console-fra.rpki-client.org