Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
File: -HfnZ8AkHlKW_jMylZne-j0toUE.cer (raw, json)
Hash identifier: TSYc4C8t2rvV00vjx0C9zuZAMM5sckwroQzXX5Skx5Q=
Subject key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Nov 2024 14:10:36 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139850
IP: 103.146.54.0/23
IP: 2001:df2:4780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138649 (0x21d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 26 14:10:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:92:6d:87:73:36:76:4e:11:59:3a:54:b9:
e8:8b:79:fb:3c:b9:04:02:a9:76:f0:67:6f:f1:84:
84:ad:fc:c2:56:43:ae:e6:16:23:36:76:d1:14:74:
3b:9e:0f:30:d1:55:8c:4e:6a:6c:78:0d:e7:f4:31:
16:df:f3:1b:61:b4:3e:4b:07:69:51:1e:fe:f0:24:
6d:84:36:47:4a:9b:41:21:4b:db:8b:59:6d:82:05:
73:8f:8d:ec:5f:a0:fb:cb:cb:b5:09:5f:51:3d:a8:
fc:b3:4d:70:1c:24:54:1a:da:10:05:76:d1:6c:0b:
71:52:f4:3f:1e:78:da:e7:42:38:34:b8:5b:d9:6c:
23:db:92:f4:49:38:7e:b4:7b:1a:be:77:02:83:3d:
f4:9f:68:e5:92:2c:45:07:04:5a:cf:63:6b:e5:14:
d7:59:c4:25:0b:5a:d5:9d:89:f8:c6:5f:a6:78:bb:
c3:66:c9:21:70:96:7c:41:85:27:99:58:71:62:51:
54:fe:07:26:4c:00:af:d2:59:c7:7c:e4:ce:d2:59:
36:6d:c4:88:c5:09:1b:5c:70:2f:40:c1:41:db:85:
8e:82:0a:a7:d6:ea:aa:e4:a1:ef:62:64:be:af:6b:
b1:c8:1a:f6:53:62:05:5b:85:f5:44:a3:64:70:18:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139850
sbgp-ipAddrBlock: critical
IPv4:
103.146.54.0/23
IPv6:
2001:df2:4780::/48
Signature Algorithm: sha256WithRSAEncryption
21:e5:6c:7a:ac:06:04:f3:89:2b:5e:d5:f1:08:bf:77:70:bf:
b2:88:5e:0f:1f:c8:2f:22:bb:71:69:9a:34:ca:bb:0c:c7:34:
3e:4b:67:ec:41:bf:21:19:a1:67:7e:85:fc:0e:c6:76:6d:6d:
4e:b1:2c:f6:3d:84:65:98:86:3e:8c:bc:07:44:b4:ca:06:01:
c5:76:19:f8:d6:3c:0b:4d:d6:10:23:d0:1b:41:d4:ea:dc:e6:
43:17:19:57:43:c9:3c:80:20:9a:61:51:08:e9:5c:5b:5f:a0:
54:f4:bd:7d:0c:42:11:15:25:1d:ae:ef:21:29:5b:c8:15:e8:
93:41:49:90:d0:95:e3:e6:07:d1:a3:d0:e4:e5:15:4b:b9:2a:
e0:01:70:da:2d:cd:88:75:f1:1c:0c:af:da:59:66:6d:97:30:
9f:73:2d:48:ad:a6:d6:28:f1:ab:58:c7:8a:fa:11:d3:c2:8f:
e3:d1:91:3c:e2:14:69:4c:ee:37:d9:e2:e1:bf:43:29:99:c4:
b2:e5:d1:34:fa:ac:f8:8b:77:6a:08:7f:71:43:9c:ea:94:91:
31:f9:89:65:c8:69:38:02:3c:a0:a2:80:8e:a2:5c:c6:f5:dd:
a0:eb:6e:c3:c9:bb:42:29:1f:d3:90:07:19:63:a2:90:c6:d5:
d3:68:0e:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:10 2024 by rpki-client on console-fra.rpki-client.org