Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer (raw, json)
Hash identifier: TiAMXnmbs4mjU1+iDxGXsn5MkuA9DDrd1GD3HaaNDa4=
Subject key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FD91
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 04:40:50 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151953
IP: 203.19.5.0/24
IP: 2001:df3:640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130449 (0x1fd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 04:40:50 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:78:82:8c:81:b2:a3:d0:fc:8e:a4:d7:5e:
fc:0d:03:2f:01:f6:e8:a9:07:c8:43:bd:5d:7e:a3:
c4:9d:59:b6:67:6e:9c:e8:d4:0e:f7:e7:a4:f7:89:
0f:d3:35:37:46:8e:fe:b9:20:aa:2f:72:cd:4d:47:
78:cb:e4:19:af:0f:fe:06:62:64:17:4d:f2:01:b3:
e8:dd:1e:96:0c:0d:2d:43:ad:2f:5f:21:9c:fd:dc:
6a:ce:fd:49:84:d5:9d:25:2c:af:76:11:7d:c3:7c:
4f:9b:d3:2e:bb:e6:bb:cc:51:dd:9a:63:8b:08:80:
f7:cf:5b:a9:60:62:7d:17:cf:23:e8:a5:c4:84:e0:
5b:5b:01:e9:d4:e8:1e:29:a9:f9:57:ed:ab:03:8a:
c3:15:ec:2a:a1:0a:88:d7:e5:fe:7b:0e:ce:9b:f9:
83:96:9f:37:5a:f4:5f:95:86:8c:96:df:50:35:ea:
b3:d2:e9:2b:60:4f:a7:ab:00:4c:11:d6:52:9e:11:
4b:4b:d0:09:46:26:0d:46:f6:98:c4:81:30:13:b7:
dc:48:ac:62:fd:87:1d:98:43:58:c7:99:ac:eb:47:
38:1d:ab:52:57:90:f7:b5:a9:fb:78:72:75:0f:45:
3e:c2:e7:74:41:02:76:ca:ce:26:53:52:34:41:35:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151953
sbgp-ipAddrBlock: critical
IPv4:
203.19.5.0/24
IPv6:
2001:df3:640::/48
Signature Algorithm: sha256WithRSAEncryption
64:12:90:8a:63:43:7b:2d:bc:3d:49:a1:96:f9:ca:2e:cb:ed:
97:56:f4:f1:63:2f:e1:2a:54:17:59:a4:3e:3f:1f:2f:e6:4e:
39:c4:60:eb:1d:fa:83:c1:50:2c:46:e8:d6:ee:7f:6e:00:8e:
2b:a1:9d:5e:65:9c:ce:50:a3:13:69:28:c5:10:aa:34:a7:4a:
a0:60:a8:9b:ac:dd:54:f4:aa:ef:2a:2e:8f:d4:f3:02:37:ea:
a8:8c:39:7e:08:52:f3:14:91:b6:3d:f4:12:d6:e0:c4:cf:77:
f4:95:5c:43:fa:19:22:15:ae:fc:83:7f:83:45:b7:31:b5:e5:
4a:d7:2b:7f:28:73:00:7e:a0:87:d6:38:fb:4b:52:fe:0c:96:
66:0e:42:24:d5:e9:1e:6e:c0:25:0f:24:d8:0f:12:13:3d:58:
50:33:fd:bf:21:bb:42:a9:c5:ff:bc:8b:e1:ff:45:cc:88:7a:
96:d6:da:23:dd:19:ad:00:f7:c6:1c:40:15:45:9c:05:c6:24:
5b:65:22:60:5b:d1:88:4d:21:d7:2e:54:2a:01:8c:52:09:a1:
1c:63:9c:db:df:c3:72:0a:91:55:bb:a8:cc:82:3a:01:12:2f:
ea:ab:06:34:04:5a:22:6d:eb:6a:8f:22:bf:a3:de:a1:39:3d:
f0:45:30:da
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAf2RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcwMzA0NDA1MFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFF
MkFGQjVCRDk4RTBCMTExOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRmniCjIGyo9D8jqTXXvwNAy8B9uipB8hDvV1+o8SdWbZnbpzo1A7356T3iQ/T
NTdGjv65IKovcs1NR3jL5BmvD/4GYmQXTfIBs+jdHpYMDS1DrS9fIZz93GrO/UmE
1Z0lLK92EX3DfE+b0y675rvMUd2aY4sIgPfPW6lgYn0XzyPopcSE4FtbAenU6B4p
qflX7asDisMV7CqhCojX5f57Ds6b+YOWnzda9F+VhoyW31A16rPS6StgT6erAEwR
1lKeEUtL0AlGJg1G9pjEgTATt9xIrGL9hx2YQ1jHmazrRzgdq1JXkPe1qft4cnUP
RT7C53RBAnbKziZTUjRBNWFZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU6Ggh6fI9
QvNi5Crir7W9mOCxEZMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM2RkQ2LzY4REE0QjZBMzhGNjExRUZCMTMxODQyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJ
OVF2Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlGRMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyxMFMA8EAgAC
MAkDBwAgAQ3zBkAwDQYJKoZIhvcNAQELBQADggEBAGQSkIpjQ3stvD1JoZb5yi7L
7ZdW9PFjL+EqVBdZpD4/Hy/mTjnEYOsd+oPBUCxG6Nbuf24AjiuhnV5lnM5QoxNp
KMUQqjSnSqBgqJus3VT0qu8qLo/U8wI36qiMOX4IUvMUkbY99BLW4MTPd/SVXEP6
GSIVrvyDf4NFtzG15UrXK38ocwB+oIfWOPtLUv4MlmYOQiTV6R5uwCUPJNgPEhM9
WFAz/b8hu0Kpxf+8i+H/RcyIepbW2iPdGa0A98YcQBVFnAXGJFtlImBb0YhNIdcu
VCoBjFIJoRxjnNvfw3IKkVW7qMyCOgESL+qrBjQEWiJt62qPIr+j3qE5PfBFMNo=
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:22 2024 by rpki-client on console-ams.rpki-client.org