Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.cer (raw, json)
Hash identifier: WxhK5Lqv24PB2WECn2qW5Yc7jQsauq8N2APVHkKdbX8=
Subject key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF8B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 16:02:24 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 142133
IP: 103.166.172.0/23
IP: 2407:59c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126859 (0x1ef8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: May 2 16:02:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9148F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ca:95:19:db:32:8a:1e:fb:f3:66:8d:ef:
1c:12:05:50:01:ac:4c:05:cf:37:08:a6:12:b5:b6:
b1:d0:43:ba:ca:7d:20:14:32:a7:c4:38:10:ba:60:
03:43:ef:9f:64:06:c8:ec:fb:73:2f:c7:13:55:b7:
24:f5:cb:8d:7b:91:02:7b:76:04:14:fe:ed:47:51:
05:2d:e5:83:04:80:c7:c9:5a:bc:f3:89:4a:50:04:
96:f4:d8:7d:02:79:7f:4a:98:cb:9d:f9:25:16:a4:
f6:9a:2d:7a:8e:a6:02:1f:97:97:27:d9:ec:d8:7e:
6b:bd:eb:69:16:cf:d9:6c:39:c9:91:42:3d:0c:e6:
8c:76:4a:d6:aa:16:2a:e9:41:d4:69:d0:1f:54:03:
0d:ae:38:a7:64:ba:6e:06:4d:ad:2a:e7:34:59:ac:
f3:ae:d4:38:a3:05:46:be:ef:ba:6d:47:fa:a6:f8:
20:30:72:1a:e4:ea:96:76:f9:e6:3a:91:1e:55:f8:
e0:8c:8a:d9:f0:a9:4b:65:df:40:62:e4:ca:6f:47:
03:cc:a6:81:76:91:01:b7:16:74:9d:e4:2f:7a:fb:
6a:99:8e:7a:42:9c:29:f4:e0:96:f8:c8:d1:57:ef:
be:ca:3b:79:e5:62:39:bc:c5:cf:37:95:c1:a6:62:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142133
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:28:76:b1:a0:62:17:82:72:c1:42:7b:8f:d9:1c:38:81:78:
dc:5d:d5:05:af:0c:d6:fe:a4:42:30:b4:64:a7:51:27:8c:7d:
94:85:77:f1:d6:b2:a3:98:b0:0a:2c:79:fb:7f:32:28:d9:6a:
91:9a:fe:4e:9f:56:c5:c2:2a:3a:f7:44:b0:11:63:96:7a:31:
09:17:8a:16:20:0c:06:aa:2b:ee:0f:de:0a:d0:cf:49:c7:da:
f1:79:3d:66:dd:4c:95:1e:5a:47:16:5b:4c:89:c9:c4:a8:b9:
c0:fe:01:cf:45:88:d3:cb:40:b9:a5:ca:e7:5f:2d:32:cf:f9:
17:5b:c4:1f:fb:84:87:da:a4:ec:38:59:63:5d:6f:29:92:88:
ac:27:76:e1:e6:43:93:79:ab:31:a7:cc:a2:e1:df:dd:97:23:
d5:45:97:aa:13:22:93:28:a5:88:6f:70:43:40:82:ea:09:67:
27:66:f7:cb:b3:c3:41:b5:74:6f:0f:39:09:4d:ff:db:7d:ce:
a5:53:0a:d0:ed:34:1a:2c:af:ff:2f:13:84:14:e9:a9:04:c1:
5f:ab:22:17:6f:ec:46:a4:1a:9b:26:3a:e6:0f:f1:bb:e5:c7:
b3:b2:ac:a4:aa:bf:d4:14:1c:bc:61:fd:bd:c2:72:9c:a1:da:
f9:bc:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:56 2025 by rpki-client