Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer (raw, json)
Hash identifier: xorM/P3Qe2MhiZ0RTgjudLcoCMVANP/L6oFDeLVl8M8=
Subject key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F499
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 May 2024 22:25:34 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 149822
IP: 103.187.30.0/23
IP: 2400:7960::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128153 (0x1f499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 22:25:34 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:8f:a9:2c:a4:47:20:6e:f4:54:c2:00:9c:
af:95:2a:74:45:09:04:4e:2b:2c:ae:ea:2f:92:af:
c7:f8:e7:89:33:ed:bb:7f:e0:da:19:a5:21:34:9b:
71:45:bf:31:e8:11:0f:23:d3:9d:de:8f:1a:5a:c3:
f8:54:7b:d9:ae:c9:2b:b4:79:e1:d4:d6:86:c6:f3:
31:e0:86:c2:b1:df:af:d1:34:7f:17:ce:66:6a:59:
8c:86:be:cd:d5:3a:8a:b5:9a:6b:fa:6b:f5:9d:fd:
d8:45:d3:46:f9:fc:01:f1:8e:4d:9f:d1:8c:32:50:
88:7b:5a:77:6c:db:19:24:20:3b:cc:cf:b6:09:ad:
8a:a1:94:a9:64:3e:2f:fb:b1:ce:2c:44:de:25:52:
fb:ab:55:fd:a6:34:c7:80:54:78:e1:40:cb:f9:5c:
aa:5e:7a:ea:1f:e9:fc:d0:a2:95:79:1c:63:1b:f6:
72:df:1d:21:5c:f7:8b:1b:a7:0a:8d:22:95:8c:d8:
61:a3:20:e1:82:5a:51:d5:4f:87:f8:fc:a4:fc:25:
0f:0d:7a:ea:99:ac:58:97:e4:9c:1f:53:56:86:6a:
e9:49:ee:cb:91:ec:9a:9b:00:6c:10:cc:2a:84:85:
be:fc:ee:b0:39:de:7e:df:e0:6e:ed:a1:51:79:fb:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149822
sbgp-ipAddrBlock: critical
IPv4:
103.187.30.0/23
IPv6:
2400:7960::/32
Signature Algorithm: sha256WithRSAEncryption
38:03:fe:12:83:e2:b6:8f:d0:7f:49:46:ce:b6:e2:b5:f5:0c:
94:96:73:cc:de:e2:d7:1f:e1:9b:7a:b4:d4:20:9d:3f:5f:78:
fe:bd:21:68:16:c2:c0:d2:1c:c5:c0:de:71:48:a6:6b:af:f1:
4b:fb:45:db:5b:72:29:39:de:04:40:a4:c1:1c:ce:f3:2a:06:
21:c9:b1:1c:b0:45:d0:cf:01:23:a9:e7:39:73:28:06:07:f5:
4e:bb:a4:55:23:30:96:38:b6:1b:25:8f:76:86:81:81:37:2e:
5f:08:96:52:07:ab:ec:e9:ac:17:c7:34:73:27:a1:17:d4:1a:
76:33:2a:09:0e:de:d0:44:ed:ed:9f:cb:78:2d:a9:5c:9a:cc:
df:d1:65:d0:bb:ea:85:b6:91:7e:c5:12:72:83:8a:44:88:da:
31:1f:a5:24:6b:7a:29:c5:c0:24:69:16:52:1c:c3:e9:11:a7:
bf:c4:94:de:e6:d9:95:f5:5f:d5:52:01:44:33:04:5f:9a:3d:
da:f8:ba:72:ef:de:29:38:90:29:e9:84:20:f2:65:4e:a3:2d:
d4:a0:ba:2e:56:23:8d:35:8b:2f:ea:8c:9e:44:3c:78:6c:00:
78:02:54:c0:6a:d7:d0:d9:3b:f5:54:6e:0c:ab:78:2a:85:58:
da:ed:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:05 2024 by rpki-client on console-fra.rpki-client.org