Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
File: 15v9g5udDgnQQF7QTuUpIOkLesQ.cer (raw, json)
Hash identifier: CISsMKicy0W2jusg7L0Rk6Rj+u3dczAUfiJRGpc1czE=
Subject key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DAD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Sep 2024 05:37:01 +0000
Certificate not after: Tue 31 Oct 2028 00:00:00 +0000
Subordinate resources: AS: 153178
IP: 2001:df4:1d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134573 (0x20dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 05:37:01 2024 GMT
Not After : Oct 31 00:00:00 2028 GMT
Subject: CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:81:e9:e8:02:4a:9f:25:61:fb:8d:83:ca:
bf:40:d9:1a:0f:f5:aa:e2:26:08:4d:24:05:c4:ae:
a0:28:9c:d1:fb:f3:10:a1:71:20:af:fa:f2:f4:f5:
a6:bf:9d:92:79:c4:61:c9:ca:82:dd:24:8f:e3:ac:
da:3c:06:08:04:50:b5:0d:e6:a5:50:32:dc:37:18:
12:42:ef:d2:dd:86:33:7f:6b:b5:37:d9:f4:54:81:
ec:d1:f3:84:a3:16:bd:75:67:c9:69:c3:9b:d2:a6:
e9:63:db:9f:16:ec:8a:03:a2:47:0a:a6:f8:d5:4e:
6c:2a:5e:a4:9b:39:9c:07:3d:24:4e:fd:cd:6a:19:
e1:cf:cd:67:dd:3a:87:9f:73:f4:d8:1c:14:84:ea:
a6:0a:85:2f:6f:b3:c9:e7:7e:56:4d:97:f1:a1:e6:
59:62:99:0b:a5:e5:c1:22:a4:ca:11:a8:57:34:ca:
4c:e6:36:7e:a2:35:16:af:71:4e:81:2e:2e:65:52:
09:ca:f9:38:ad:11:db:f8:57:7a:19:ee:91:55:e7:
54:a9:f3:ce:23:74:0b:63:31:95:90:46:7e:37:b0:
92:d4:f5:f1:ad:42:b7:23:5d:8c:f1:f1:f1:fb:15:
c3:07:cb:4b:1c:a0:2e:c7:e2:cc:c0:c3:f1:14:6f:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153178
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
10:c4:82:01:94:23:23:5e:54:c2:40:ae:df:0f:6b:93:41:4e:
1d:cf:d0:f4:0b:d0:c3:25:eb:43:06:d8:8e:7b:96:06:c3:c2:
cb:b8:a0:f2:dc:93:e4:47:4e:7a:0d:98:29:0a:bc:e1:db:1f:
f7:65:c8:bb:fa:bb:18:a7:db:f6:29:60:33:34:2d:7a:cd:bb:
27:01:30:ef:75:55:7f:f7:77:66:88:a2:e1:b9:1f:2a:51:b6:
b8:40:ae:a7:83:5a:4d:01:f9:76:ec:13:c1:1b:3e:79:87:ef:
c8:77:a4:13:97:ef:02:39:b7:61:49:05:c0:92:cf:45:84:fe:
5b:3d:ba:27:df:c6:82:60:8e:94:b6:d1:61:71:80:ce:90:0e:
60:89:ed:39:80:51:87:b5:d9:32:c1:21:94:53:a9:16:f3:43:
b7:49:c7:0c:ec:c7:ee:6a:12:17:41:d3:3c:86:7b:8b:ab:9e:
f7:77:9a:c5:cc:ef:8e:97:51:75:5d:46:9b:dc:91:11:8b:b0:
42:41:b0:ef:60:73:cc:aa:d2:05:cb:3d:18:e2:b4:69:79:e8:
18:90:01:1a:ac:ab:dd:ba:74:d2:ef:77:95:28:46:48:91:4e:
24:ff:8d:45:d4:78:91:af:51:af:f9:7b:f0:45:72:12:de:ca:
c2:91:e4:96
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAg2tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkxNjA1MzcwMVoXDTI4MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVE
MDRFRTUyOTIwRTkwQjdBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbSoHp6AJKnyVh+42Dyr9A2RoP9ariJghNJAXErqAonNH78xChcSCv+vL09aa/
nZJ5xGHJyoLdJI/jrNo8BggEULUN5qVQMtw3GBJC79LdhjN/a7U32fRUgezR84Sj
Fr11Z8lpw5vSpulj258W7IoDokcKpvjVTmwqXqSbOZwHPSRO/c1qGeHPzWfdOoef
c/TYHBSE6qYKhS9vs8nnflZNl/Gh5llimQul5cEipMoRqFc0ykzmNn6iNRavcU6B
Li5lUgnK+TitEdv4V3oZ7pFV51Sp884jdAtjMZWQRn43sJLU9fGtQrcjXYzx8fH7
FcMHy0scoC7H4szAw/EUbyaDAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU15v9g5ud
DgnQQF7QTuUpIOkLesQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwREE1L0FGODg1RjY2NzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1
ZERnblFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlZaMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9B1AMA0G
CSqGSIb3DQEBCwUAA4IBAQAQxIIBlCMjXlTCQK7fD2uTQU4dz9D0C9DDJetDBtiO
e5YGw8LLuKDy3JPkR056DZgpCrzh2x/3Zci7+rsYp9v2KWAzNC16zbsnATDvdVV/
93dmiKLhuR8qUba4QK6ng1pNAfl27BPBGz55h+/Id6QTl+8CObdhSQXAks9FhP5b
Pbon38aCYI6UttFhcYDOkA5gie05gFGHtdkywSGUU6kW80O3SccM7MfuahIXQdM8
hnuLq573d5rFzO+Ol1F1XUab3JERi7BCQbDvYHPMqtIFyz0Y4rRpeegYkAEarKvd
unTS73eVKEZIkU4k/41F1HiRr1Gv+XvwRXIS3srCkeSW
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:19 2024 by rpki-client on console-ams.rpki-client.org