Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer
File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.cer (raw, json)
Hash identifier: 3nA5ckvQVN5ntznOPgx7ifvZ9hlD/Zm6lfCBqVAx77o=
Subject key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C0CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Sep 2023 21:46:10 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 137894
IP: 103.196.56.0/22
IP: 2402:a440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114893 (0x1c0cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 29 21:46:10 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:30:90:32:4c:6c:68:58:06:77:84:78:5e:
18:2d:02:22:89:7e:7d:86:ec:86:33:d5:7a:40:1d:
5a:2e:37:78:ce:be:e0:71:ee:94:e2:d4:be:a9:02:
22:2e:3d:6d:e1:c3:57:1a:90:8c:98:b7:5d:88:4f:
9d:ae:ee:6b:64:d0:c7:6d:6f:80:2b:b0:df:06:d8:
3c:12:7e:b0:76:30:25:86:e5:4a:d9:64:47:fa:7b:
27:25:00:cc:9a:63:bd:64:64:9d:0f:0f:00:c7:20:
96:0a:7c:be:cc:d1:ac:82:ae:d7:35:24:6a:5e:95:
99:3c:22:13:ea:bb:4f:97:35:a5:89:3c:0c:0d:d3:
67:7f:cc:cf:dd:ba:8a:20:dc:97:8b:a3:40:d2:ea:
5d:c2:ee:06:32:dc:3e:51:82:5b:be:16:d8:ce:c9:
f5:04:a7:78:2e:ed:2d:a6:a1:53:de:74:9e:c9:9d:
ae:5a:5a:c7:b9:e9:d3:b5:f3:f9:d1:85:a9:d2:f9:
8e:df:9a:2b:a9:ab:05:d8:66:62:64:ad:cd:cb:d3:
78:8a:a8:8a:57:02:d6:8e:61:19:8b:52:01:91:88:
d1:38:a2:10:57:38:d7:9c:0e:5d:b5:9c:41:56:30:
ad:18:25:52:a4:9e:f5:c0:8d:7b:a4:55:46:1d:a9:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137894
sbgp-ipAddrBlock: critical
IPv4:
103.196.56.0/22
IPv6:
2402:a440::/32
Signature Algorithm: sha256WithRSAEncryption
32:76:b9:99:34:b9:e5:32:c0:5e:13:e6:76:1b:33:e2:5a:35:
4d:45:78:6c:50:b9:c4:7b:01:09:39:38:60:bb:88:4d:88:5c:
e2:c1:9f:06:f9:70:36:03:f8:7a:49:c5:1f:f1:eb:58:e8:9c:
53:48:3a:f0:fc:81:2d:85:9f:6a:fa:de:d6:14:ff:f7:26:21:
30:75:fe:cd:7e:17:24:36:39:d9:fc:a7:02:15:c4:1f:5e:d9:
c4:3e:2b:25:0a:9c:ab:15:02:70:72:7a:b1:82:07:d3:1e:fb:
f1:d5:58:ce:2b:8b:8c:5e:aa:ea:8f:0a:85:c2:2b:b2:60:d3:
8e:4c:a0:d4:e1:5c:a6:fd:c2:78:df:3b:9e:f0:45:9e:fd:d1:
9c:b1:88:ef:4c:35:c0:29:32:92:90:bf:65:31:ec:f2:53:d8:
81:18:7f:3f:9e:3a:7d:1b:1b:8f:dd:f1:f4:b9:8d:57:bb:5d:
cb:05:05:f9:11:f7:32:76:d2:2a:21:ea:dd:0a:11:48:a0:8a:
ed:8d:6b:7d:af:f0:67:e0:54:0b:fd:8c:43:3d:7f:72:9a:23:
0f:64:b5:26:96:57:f1:28:1a:fa:56:62:50:1f:64:7e:bf:e4:
fb:88:c0:9d:51:45:ce:65:46:18:a6:1d:3e:5e:a9:8e:a8:ce:
e2:fb:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:12 2024 by rpki-client on console-fra.rpki-client.org