Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer (raw, json)
Hash identifier: 7iDK98V88mnCfdI8UQ7SB1i6iKSQbr+BIuoeQRPlRMk=
Subject key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021C7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 Nov 2024 03:34:23 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.163.48.0/23
IP: 2001:df6:a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138365 (0x21c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 20 03:34:23 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:e5:ed:aa:01:4b:27:ec:c2:ab:a5:08:23:
07:8f:f8:96:75:af:ad:16:64:ff:0f:fb:48:a6:ef:
eb:ca:68:6e:2e:f3:41:46:27:be:0c:4e:81:96:00:
d2:02:59:7e:5e:42:76:13:b2:79:0b:4f:55:f1:f7:
01:91:27:4a:ec:57:0d:bc:fa:27:da:f3:65:8a:6a:
9f:a1:3b:8d:01:f4:0a:0e:ef:df:be:f1:21:15:0a:
ea:ae:f5:62:aa:65:97:6f:bb:7c:8a:28:f5:74:1d:
0b:eb:09:e9:bb:6d:1b:08:e6:48:6e:24:c8:d4:72:
86:54:14:ac:c3:21:db:e6:54:13:51:a1:a2:1a:0f:
2a:66:d9:af:c9:60:e3:21:9d:0a:60:20:16:97:ff:
80:13:47:94:ae:c5:37:7e:f1:b2:bb:30:46:e7:40:
bf:55:aa:09:f4:8e:54:27:d0:fb:04:4a:9a:37:15:
63:1f:79:a3:f8:bc:e0:e5:ea:0a:b4:3c:19:94:a8:
d4:f1:88:28:b6:d8:75:1e:a5:46:ba:5c:73:2a:3a:
69:b5:68:6e:c3:2e:47:27:47:6e:3a:b1:7e:94:10:
6c:c3:a5:f6:7f:99:78:9e:eb:aa:e2:81:fb:c2:f1:
f8:1d:f7:16:80:a1:74:b8:28:d1:74:16:53:9f:31:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.48.0/23
IPv6:
2001:df6:a80::/48
Signature Algorithm: sha256WithRSAEncryption
d3:d3:d1:93:2c:65:1a:62:18:3d:16:b9:3b:89:a0:ff:f9:e2:
e1:6e:63:68:5c:2a:44:d5:2a:6e:72:bf:5f:b7:0d:91:ef:cd:
6e:3c:3d:0e:2e:9d:4f:23:9f:27:af:21:e6:3e:f4:cc:00:7b:
b9:bc:90:81:80:5f:8d:51:cb:bb:dc:d3:f4:c6:bc:79:05:27:
1f:19:5a:44:82:43:d0:ed:1d:b8:12:6e:47:8f:85:52:9c:ad:
7a:5d:e0:5c:6a:d9:19:2f:84:d5:95:fa:19:ab:7b:e2:8b:25:
db:ad:2c:56:2a:19:9a:06:5c:f4:ef:bb:36:70:a1:01:4a:4e:
ac:14:fe:c9:7a:2b:25:8e:17:bd:10:60:9b:d5:8a:05:58:03:
50:b7:2d:47:4e:de:4d:56:be:e5:eb:fb:8d:8a:3e:05:db:1b:
a7:a9:13:e1:d4:09:0d:14:e7:ac:35:20:f2:11:e7:5a:89:dd:
c5:6c:d1:a9:46:a6:40:bd:95:15:70:ea:e9:5b:27:3d:87:65:
16:76:9e:e0:e1:7d:4f:c5:3a:53:55:bf:53:24:20:c5:53:79:
e9:79:6f:4c:75:8d:00:e0:13:67:e2:7b:d5:12:a1:25:09:3e:
b2:c0:a0:2b:0c:c3:63:19:4f:8c:0c:be:a3:f7:33:34:d9:cc:
1f:3a:6f:cf
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAhx9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyMDAzMzQyM1oXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTkzNjMxMTAvBgNVBAUTKEU2RjA4MTlDNTlGREM2NDFFNDVCQ0Mz
M0NCNTBGM0NEODU0QUMyRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3Q+XtqgFLJ+zCq6UIIweP+JZ1r60WZP8P+0im7+vKaG4u80FGJ74MToGWANIC
WX5eQnYTsnkLT1Xx9wGRJ0rsVw28+ifa82WKap+hO40B9AoO79++8SEVCuqu9WKq
ZZdvu3yKKPV0HQvrCem7bRsI5khuJMjUcoZUFKzDIdvmVBNRoaIaDypm2a/JYOMh
nQpgIBaX/4ATR5SuxTd+8bK7MEbnQL9Vqgn0jlQn0PsESpo3FWMfeaP4vODl6gq0
PBmUqNTxiCi22HUepUa6XHMqOmm1aG7DLkcnR246sX6UEGzDpfZ/mXie66rigfvC
8fgd9xaAoXS4KNF0FlOfMRsbAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU5vCBnFn9
xkHkW8wzy1DzzYVKwvUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE5MzYzLzMxRUFERkE0NUNCQTExRUM4QUExM0UyNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExOTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZu
OXhrSGtXOHd6eTFEenpZVkt3dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnozAwDwQCAAIwCQMHACABDfYKgDANBgkqhkiG9w0BAQsFAAOC
AQEA09PRkyxlGmIYPRa5O4mg//ni4W5jaFwqRNUqbnK/X7cNke/Nbjw9Di6dTyOf
J68h5j70zAB7ubyQgYBfjVHLu9zT9Ma8eQUnHxlaRIJD0O0duBJuR4+FUpytel3g
XGrZGS+E1ZX6Gat74osl260sVioZmgZc9O+7NnChAUpOrBT+yXorJY4XvRBgm9WK
BVgDULctR07eTVa+5ev7jYo+Bdsbp6kT4dQJDRTnrDUg8hHnWondxWzRqUamQL2V
FXDq6VsnPYdlFnae4OF9T8U6U1W/UyQgxVN56XlvTHWNAOATZ+J71RKhJQk+ssCg
KwzDYxlPjAy+o/czNNnMHzpvzw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:17 2024 by rpki-client on console-ams.rpki-client.org