Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer
File: yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer (raw, json)
Hash identifier: N9qW3fUBY41T8R98lJTp5NnPx5Anv6cKSV2vCBFmXKI=
Subject key identifier: C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A91B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Jun 2023 21:10:39 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 134526
IP: 103.231.84.0/22
IP: 150.242.36.0/22
IP: 2403:6dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108827 (0x1a91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 8 21:10:39 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:4f:73:3b:79:e0:a9:f4:c4:ad:81:35:64:
40:45:03:30:38:05:c5:6c:e0:6e:e1:41:42:c3:fd:
cd:ab:6b:5e:63:7b:38:53:8a:fe:95:98:5d:71:8c:
5f:d5:22:a8:ea:0c:85:c6:8e:c9:e4:cd:9c:0b:44:
a0:21:6c:1e:a7:ef:a0:0b:59:16:c5:78:e1:6d:cb:
59:1f:0b:fe:76:14:5f:82:ea:08:7d:de:eb:50:5d:
14:fb:07:59:23:94:dd:11:d7:1d:f4:77:90:af:e5:
bb:13:5f:8d:6b:45:e5:6b:3c:e9:9c:86:59:91:1b:
10:17:7d:d8:f6:e3:ee:e0:9e:d8:98:49:13:e4:6e:
25:ea:5a:db:94:52:87:37:57:4f:58:06:f2:17:8d:
60:9d:67:dd:f3:57:8a:21:98:29:32:02:d8:9f:0c:
fc:be:e2:09:ec:f6:5b:f1:53:f6:1f:11:cc:ac:cd:
9d:f7:52:d9:fd:bf:71:5a:1a:f2:39:3b:72:c2:d1:
35:6f:c6:c0:67:4d:c3:29:14:75:f4:ee:9d:3d:a4:
d6:43:17:b4:0a:7a:eb:7e:bd:dc:53:2c:5d:83:11:
b4:a4:2e:ab:90:81:d7:60:bd:c3:61:0c:8d:b2:45:
1c:8d:b5:8e:0a:9e:bc:a9:4b:f0:96:5a:00:93:cb:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134526
sbgp-ipAddrBlock: critical
IPv4:
103.231.84.0/22
150.242.36.0/22
IPv6:
2403:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
68:9b:fd:9d:ea:26:64:9f:89:a5:87:2f:59:1a:d1:b2:cd:36:
07:cf:c9:77:ed:6d:2f:ad:2d:cc:43:7f:da:07:74:81:4c:7d:
b2:d5:be:93:c0:07:23:c0:46:62:23:aa:4f:32:76:42:06:bf:
72:ca:a5:5d:59:35:c9:15:a7:77:5c:ba:ef:b6:09:7c:57:2e:
76:38:3d:db:68:e0:ae:55:12:6c:2b:cf:4f:e3:81:49:8b:84:
4b:a3:ca:2d:87:80:ba:c7:7d:65:bc:71:3a:49:81:4c:ce:31:
f6:40:8a:21:8e:02:10:0c:39:14:c3:84:c0:a9:75:99:c3:b1:
57:5d:58:3a:25:5c:e8:41:b0:8c:a4:f0:a0:4d:dd:cc:a4:51:
fd:72:e8:75:66:4a:ab:1c:68:f8:d8:81:73:df:c2:d1:97:3b:
ab:79:8c:0d:00:e4:45:7f:fb:51:f5:c3:5d:34:04:cb:78:51:
63:1b:1e:14:73:f8:75:a8:f4:04:d5:07:23:28:5d:de:ca:ab:
d1:32:8b:07:e0:05:25:ee:57:da:1a:9f:17:81:6d:c4:7a:d8:
62:bf:50:04:52:05:21:12:4c:02:42:9e:7c:58:5f:87:47:d2:
df:81:55:cc:49:20:82:b5:21:35:69:85:7b:03:de:1c:e1:b1:
ee:de:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:46 2024 by rpki-client on console-ams.rpki-client.org