Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
File: 5DMXblmum0dk6179BKQ2hWKrXiE.cer (raw, json)
Hash identifier: 5E+dFafOmuYLkxxERKR3B2PoRkmgBs3QgJrZwG0FnQE=
Subject key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E86F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Apr 2024 23:42:35 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 24187
AS: 133540
IP: 27.131.128.0/18
IP: 103.109.60.0/22
IP: 202.173.208.0/20
IP: 2407:7a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 18:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125039 (0x1e86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 23:42:35 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:b3:d1:aa:b6:45:45:58:58:10:d3:bc:4c:
01:2e:14:53:57:49:26:fb:91:1c:99:e6:b7:ab:2e:
54:a4:b8:fa:cf:7b:70:b3:93:de:ec:ad:f5:70:d6:
e2:59:4e:38:ea:76:a6:04:ee:c4:46:22:bd:c5:f5:
d7:19:ef:94:90:d3:30:23:65:a3:16:96:21:86:9f:
98:9b:36:0f:0e:dd:d7:d3:c6:1b:92:d8:49:e6:5b:
bb:44:4c:2e:30:f9:40:fc:67:38:cd:99:cc:08:7c:
f7:6c:1f:09:6f:a4:68:88:17:0b:b1:b8:72:0c:df:
2c:30:3e:df:61:f8:a2:2a:fa:d2:5e:c4:fa:13:40:
28:f0:f3:82:16:4a:c9:09:e0:16:a2:78:c5:cc:de:
1e:51:32:c8:6b:fa:9c:27:6f:7d:e9:a5:8c:b3:bf:
03:c0:5b:0b:14:e4:2a:7d:69:9d:db:d1:1f:aa:3a:
00:b8:8a:42:e6:62:ed:9e:2e:cb:dc:97:e8:88:ef:
c6:6e:ff:90:7e:64:fa:81:ed:c4:ba:5e:b7:32:dd:
16:7b:12:1d:f4:84:fc:02:3b:41:bd:3f:52:4c:8f:
b5:3e:2f:05:6d:49:45:e8:3e:3c:9f:23:be:52:6b:
d8:19:b4:4e:9c:68:e4:0a:50:ba:05:bf:47:0d:85:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24187
133540
sbgp-ipAddrBlock: critical
IPv4:
27.131.128.0/18
103.109.60.0/22
202.173.208.0/20
IPv6:
2407:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
46:b7:6e:f0:f7:4f:fb:07:50:79:4b:c7:7c:99:57:f8:b2:76:
f8:e3:d7:e0:82:b4:ba:d2:cc:ef:e1:8c:01:73:93:14:4c:26:
80:02:c5:f3:8f:7d:69:10:ab:e8:33:49:b8:b9:39:5b:43:c2:
09:70:67:e1:2a:08:52:5b:09:bb:50:ce:f6:8a:1b:a6:6c:1a:
6d:c3:81:e3:e5:c2:51:42:d1:d3:b6:06:3c:73:72:35:70:5d:
f2:e0:f7:05:61:75:1f:1f:51:d5:a4:c0:d3:8e:71:a4:b0:ab:
05:c0:84:cc:28:a2:96:03:66:bb:c5:eb:d7:fb:23:99:6b:76:
75:f3:77:8e:03:06:26:21:70:83:e6:4c:a8:02:cc:22:a1:f7:
b6:b0:ad:36:01:1a:a2:60:00:c2:4c:7f:18:ce:74:59:7c:2a:
20:de:9c:20:75:5a:ef:a7:2e:c0:6e:8a:7e:ab:11:22:4d:b0:
70:09:c0:73:27:6b:89:61:8e:26:e9:5d:bf:42:6c:38:bf:42:
24:4e:22:a5:4b:b7:08:8e:13:95:80:a0:fb:3f:da:b4:a9:66:
29:1c:8c:e7:ef:02:c9:21:eb:da:a5:d2:c0:c0:6d:40:9e:3f:
cd:8b:ea:bd:67:7b:58:04:ed:f5:19:83:6b:ea:d5:65:b5:32:
fc:69:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:18:28 2024 by rpki-client on console-ams.rpki-client.org