Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer (raw, json)
Hash identifier: G2udyNxa1Gc2KrLarH7DGABOCEVXNlMRI4Qj40AmZ9w=
Subject key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AF27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 08 Jul 2023 05:27:16 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 151474
IP: 103.229.254.0/23
IP: 2001:df2:a040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110375 (0x1af27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 05:27:16 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:ab:96:71:6f:19:f3:b2:6c:f2:b5:84:44:
bb:00:a5:b9:37:c4:ff:49:00:c4:eb:ac:36:77:32:
95:bb:c7:2f:9f:f8:fa:8d:03:82:14:c7:42:17:fe:
15:38:b3:77:40:ec:78:aa:58:96:27:34:79:65:4a:
a3:e0:8b:0b:77:f0:58:65:1e:dd:70:f8:d8:30:83:
89:68:33:4d:a4:14:21:d3:e8:a7:b3:48:df:8a:fc:
f5:85:f1:7e:79:b3:6e:03:db:ac:c2:d7:d7:75:85:
75:d7:f2:fe:20:c5:32:b4:1a:95:4b:2e:ab:04:17:
7a:9a:84:ea:c3:49:28:9c:b1:b1:f8:f1:c9:5b:ba:
1a:cb:40:a5:90:90:b7:93:8f:f3:23:84:03:a4:dd:
22:a5:4b:54:88:7e:1e:b8:2c:77:82:8e:d0:49:47:
ef:14:23:ea:5d:9d:72:ba:38:19:6a:26:f1:10:88:
61:b0:c8:9f:3c:d9:33:01:99:6f:9e:f0:12:28:03:
9d:91:e3:50:34:87:52:00:18:00:5b:20:e2:53:a3:
66:63:cb:6b:d9:9d:10:cc:0d:97:5c:e2:20:be:14:
f1:8a:2a:01:29:34:64:12:2c:3d:61:87:b5:7f:bf:
e4:5b:80:9e:91:fd:af:5c:f5:f8:bd:d2:ba:84:cf:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151474
sbgp-ipAddrBlock: critical
IPv4:
103.229.254.0/23
IPv6:
2001:df2:a040::/48
Signature Algorithm: sha256WithRSAEncryption
72:9a:0d:96:2f:0d:29:7d:cd:f4:96:fb:5d:9c:12:ba:e9:66:
9a:01:f1:f6:36:44:65:7e:24:59:cf:d0:65:12:db:a0:de:07:
fc:3d:fc:84:d8:f9:79:60:da:c6:b7:9f:74:e2:81:11:00:03:
43:33:89:1d:52:9c:ed:81:3f:d1:61:07:ed:a4:86:b8:c5:2f:
85:32:54:95:29:6b:5a:b0:aa:c8:81:e9:93:e4:a3:b2:2c:6a:
7d:c5:e1:7c:ca:a3:7d:27:85:35:c1:99:f2:6b:ef:9d:ef:08:
66:28:b4:a8:40:b6:bd:c4:42:e9:05:e7:43:bc:ec:8f:81:e6:
79:5a:c9:99:c1:8d:24:00:29:33:52:7a:80:cf:56:ca:84:6b:
22:96:05:95:2c:94:d5:8a:c4:eb:da:2b:46:9d:3e:61:c1:5d:
00:8a:41:b3:48:2f:50:6a:85:e6:6a:10:eb:3f:82:8e:fc:86:
7e:e6:84:49:d3:db:a8:68:76:0b:cd:cc:e9:96:9c:6c:c8:b1:
c8:1d:df:d8:fe:9c:59:44:81:e8:4d:a5:62:72:55:ff:d1:f6:
9a:4d:59:bd:1e:44:97:62:c4:ca:71:24:a1:1a:3b:7e:2b:a4:
b3:c7:14:10:63:22:37:00:72:5d:89:54:4d:7f:48:9f:55:45:
e3:6e:01:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 10:18:09 2024 by rpki-client on console-ams.rpki-client.org