Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
File: zPKlJcCQFETKePBbk5LABFeVZ2E.cer (raw, json)
Hash identifier: 3JGaSvFrwkNA3b8+RU1xil+osF4DuC49belTp5mGyO8=
Subject key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D826
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jan 2024 15:43:36 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 58744
IP: 103.31.96.0/22
IP: 2402:9880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120870 (0x1d826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 12 15:43:36 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:61:2d:6a:2a:c7:09:ce:6d:00:44:8a:88:
3b:7a:b2:ae:23:80:31:ed:18:eb:fe:7a:93:fd:92:
25:2f:08:e4:76:dd:f9:fc:9f:ea:4d:75:0b:77:4e:
16:c9:89:f8:59:5c:7b:54:06:2d:98:ec:c9:25:2d:
c7:09:c0:ae:1a:76:9c:41:eb:20:13:e7:41:ae:f8:
29:14:db:4b:00:95:fd:f0:81:1b:61:0b:03:22:ad:
2e:cd:a4:f9:33:72:ee:bd:46:22:dc:ca:88:6f:77:
ee:3b:96:35:5c:f1:cb:04:53:41:75:ca:99:22:49:
be:b0:70:10:9a:82:a5:91:7b:db:1a:b5:34:05:76:
35:7f:9c:1a:1b:ae:b6:95:c3:d2:4e:34:75:5b:96:
6d:f0:16:7b:a2:ee:79:1e:0a:2d:6b:c6:7a:ab:8e:
1e:c4:42:b0:85:db:e1:36:25:3a:91:5b:c3:de:f8:
3d:62:93:dc:1c:ba:be:7c:a8:30:4c:fd:b2:96:29:
b6:d2:56:9b:42:82:de:d8:4b:e3:64:56:fe:70:20:
27:ea:5c:e8:b4:f1:c3:a9:e8:f2:40:0d:86:9d:93:
de:15:27:9e:fd:a2:36:b1:1d:ad:e7:d2:de:2d:3b:
b7:4d:56:22:e0:c1:2f:68:e6:72:55:0a:45:44:d4:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58744
sbgp-ipAddrBlock: critical
IPv4:
103.31.96.0/22
IPv6:
2402:9880::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f3:2e:11:2e:75:77:08:ff:be:6d:69:da:f2:b7:b3:f1:56:
5c:e4:26:06:db:a5:61:8c:4c:78:4b:2e:3d:75:1e:99:90:18:
79:f5:ac:72:87:ac:91:85:3b:45:38:d5:35:42:fd:57:fd:9e:
e5:c8:de:60:5a:ec:19:e1:1f:d3:dc:4d:8f:0b:f8:4d:3c:84:
a6:93:6c:7f:8a:0e:83:1e:6a:06:f0:ee:7a:f4:02:03:53:09:
1c:1d:dc:26:2d:d3:4c:c4:80:ca:81:93:f3:59:c0:7f:2d:e0:
6e:6b:28:ba:2c:9d:a1:3f:fc:c4:31:81:8b:32:4c:9a:81:02:
25:4f:5c:67:26:6a:f9:86:9c:aa:81:39:f0:87:71:21:74:b5:
ed:9f:67:9b:c7:c1:1b:14:1c:f8:2e:05:81:94:92:37:c5:6e:
b6:5e:16:eb:ea:cb:3c:49:d9:a5:96:92:2b:60:d1:37:52:58:
bb:a2:10:df:5e:39:80:be:32:78:83:92:9d:88:80:99:6d:9f:
6a:85:d1:99:e5:2f:70:b6:de:de:dd:80:b6:20:7e:4f:37:43:
92:6c:9a:af:41:f1:6d:ff:5a:84:fc:49:16:4d:73:82:8a:01:
05:e0:3b:0c:e6:83:62:98:5a:0a:2a:ce:a5:8a:3e:ec:58:54:
c1:62:1a:80
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAdgmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDExMjE1NDMzNloXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1
QjkzOTJDMDA0NTc5NTY3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM2mEtairHCc5tAESKiDt6sq4jgDHtGOv+epP9kiUvCOR23fn8n+pNdQt3ThbJ
ifhZXHtUBi2Y7MklLccJwK4adpxB6yAT50Gu+CkU20sAlf3wgRthCwMirS7NpPkz
cu69RiLcyohvd+47ljVc8csEU0F1ypkiSb6wcBCagqWRe9satTQFdjV/nBobrraV
w9JONHVblm3wFnui7nkeCi1rxnqrjh7EQrCF2+E2JTqRW8Pe+D1ik9wcur58qDBM
/bKWKbbSVptCgt7YS+NkVv5wICfqXOi08cOp6PJADYadk94VJ579ojaxHa3n0t4t
O7dNViLgwS9o5nJVCkVE1On1AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUzPKlJcCQ
FETKePBbk5LABFeVZ2EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZBMDcxLzI4MEIwOUE0ODNCRTExRUE4RTFERjM4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmND
UUZFVEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOV4MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZx9gMA0EAgAC
MAcDBQAkApiAMA0GCSqGSIb3DQEBCwUAA4IBAQA68y4RLnV3CP++bWna8rez8VZc
5CYG26VhjEx4Sy49dR6ZkBh59axyh6yRhTtFONU1Qv1X/Z7lyN5gWuwZ4R/T3E2P
C/hNPISmk2x/ig6DHmoG8O569AIDUwkcHdwmLdNMxIDKgZPzWcB/LeBuayi6LJ2h
P/zEMYGLMkyagQIlT1xnJmr5hpyqgTnwh3EhdLXtn2ebx8EbFBz4LgWBlJI3xW62
Xhbr6ss8SdmllpIrYNE3Uli7ohDfXjmAvjJ4g5KdiICZbZ9qhdGZ5S9wtt7e3YC2
IH5PN0OSbJqvQfFt/1qE/EkWTXOCigEF4DsM5oNimFoKKs6lij7sWFTBYhqA
-----END CERTIFICATE-----
Generated at Wed May 8 21:05:05 2024 by rpki-client on console-fra.rpki-client.org