Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer (raw, json)
Hash identifier: 4Jtwd0bBajfn4DgCgjbKXPUsFOHUQ2PFkTEpv50rivg=
Subject key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 16:56:57 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138043
IP: 103.130.196.0/23
IP: 2400:9860::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138101 (0x21b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 14 16:56:57 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:d9:3c:e6:20:50:2a:f9:0e:d1:dc:52:d8:
79:23:5c:6f:41:31:3c:83:48:66:4e:73:46:dd:b3:
19:00:af:79:1c:a9:c5:6d:6b:77:5c:dd:5d:35:bc:
c6:84:76:d4:8c:0d:da:7b:4b:00:be:3e:cd:33:04:
05:8c:9d:59:24:45:e6:bd:29:44:98:89:9f:7c:32:
fe:e1:ef:4d:28:55:5f:90:29:06:c1:3e:a6:b2:9c:
ef:9b:93:d4:0e:fe:ea:76:f5:19:5b:23:85:e1:0d:
62:ae:9a:04:f2:ed:2b:5c:05:e0:3e:b8:0b:17:ef:
f0:c2:94:15:91:3a:ca:bc:9f:60:7f:ce:f7:c9:2c:
31:22:32:df:51:68:06:37:16:37:1c:7c:1a:a6:db:
8f:ad:ae:f4:0a:1d:b3:81:44:81:18:5b:30:5e:c0:
f1:05:20:9f:82:93:b0:d5:2c:d8:a8:8e:83:3c:43:
f2:c0:ee:b3:20:0b:b1:06:f5:17:f9:be:8c:e4:cb:
47:d0:82:62:ff:22:50:d1:e9:99:db:34:cd:2d:fc:
07:e0:4a:67:57:91:d2:a2:ba:05:a8:8e:50:f1:19:
28:4b:21:93:de:c9:71:76:b5:6e:87:8a:e4:bc:c8:
11:87:57:50:93:b5:5d:cd:71:be:dc:4c:59:69:b9:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138043
sbgp-ipAddrBlock: critical
IPv4:
103.130.196.0/23
IPv6:
2400:9860::/32
Signature Algorithm: sha256WithRSAEncryption
85:9d:95:ea:9f:0e:ad:83:ad:0b:0a:c3:ba:a7:cf:6a:52:57:
0f:01:f1:ee:2d:8d:e0:ce:23:39:67:5b:fc:fb:25:a2:a2:ed:
28:9a:7a:cf:67:f0:fd:b5:7c:01:15:df:41:e3:22:6c:21:b7:
ab:9c:e0:3c:de:8a:31:9d:61:7e:fa:7c:07:c9:6f:d3:0a:a3:
77:9f:e2:0d:93:d2:80:ab:3e:6b:3d:78:9d:70:d2:2c:1b:4f:
e2:5a:a0:69:72:07:64:5f:f7:48:f6:a2:dc:ac:21:67:77:1a:
93:ac:df:79:52:e3:f4:aa:30:84:d2:d8:d1:25:ab:92:4b:c2:
f5:ae:56:a1:26:b4:78:fc:81:84:31:c8:a6:a3:9b:05:97:9a:
aa:c9:7f:18:29:ca:a5:48:de:c6:23:12:e5:eb:4c:8d:76:ab:
e8:a4:ad:36:39:55:a0:e9:e8:1a:db:8a:07:6d:55:12:85:b7:
1c:99:77:1e:2d:b2:ac:d3:33:9a:82:7b:0f:71:29:80:46:9a:
f0:02:12:86:8e:9e:65:7d:e4:60:58:e2:2d:0b:f4:0a:15:2f:
1f:5e:b0:6e:75:96:88:a0:f4:67:ad:7b:3a:c7:3c:e3:33:12:
c3:06:98:4c:d9:a3:79:4f:55:e1:1d:3c:26:dc:ff:0c:7c:dc:
a7:77:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:14 2024 by rpki-client on console-fra.rpki-client.org