Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer
File: 6beh3yCMdbnrMDz4g8oSjqBPxQo.cer (raw, json)
Hash identifier: f/6UvafyDo0QtHTUFe3BN4e2At8nq2uZjjx8XDwNwto=
Subject key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0214BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Oct 2024 16:51:53 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 137894
IP: 103.196.56.0/22
IP: 2402:a440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136383 (0x214bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 18 16:51:53 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:30:90:32:4c:6c:68:58:06:77:84:78:5e:
18:2d:02:22:89:7e:7d:86:ec:86:33:d5:7a:40:1d:
5a:2e:37:78:ce:be:e0:71:ee:94:e2:d4:be:a9:02:
22:2e:3d:6d:e1:c3:57:1a:90:8c:98:b7:5d:88:4f:
9d:ae:ee:6b:64:d0:c7:6d:6f:80:2b:b0:df:06:d8:
3c:12:7e:b0:76:30:25:86:e5:4a:d9:64:47:fa:7b:
27:25:00:cc:9a:63:bd:64:64:9d:0f:0f:00:c7:20:
96:0a:7c:be:cc:d1:ac:82:ae:d7:35:24:6a:5e:95:
99:3c:22:13:ea:bb:4f:97:35:a5:89:3c:0c:0d:d3:
67:7f:cc:cf:dd:ba:8a:20:dc:97:8b:a3:40:d2:ea:
5d:c2:ee:06:32:dc:3e:51:82:5b:be:16:d8:ce:c9:
f5:04:a7:78:2e:ed:2d:a6:a1:53:de:74:9e:c9:9d:
ae:5a:5a:c7:b9:e9:d3:b5:f3:f9:d1:85:a9:d2:f9:
8e:df:9a:2b:a9:ab:05:d8:66:62:64:ad:cd:cb:d3:
78:8a:a8:8a:57:02:d6:8e:61:19:8b:52:01:91:88:
d1:38:a2:10:57:38:d7:9c:0e:5d:b5:9c:41:56:30:
ad:18:25:52:a4:9e:f5:c0:8d:7b:a4:55:46:1d:a9:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137894
sbgp-ipAddrBlock: critical
IPv4:
103.196.56.0/22
IPv6:
2402:a440::/32
Signature Algorithm: sha256WithRSAEncryption
20:00:93:19:16:b4:7d:28:03:14:91:2f:4e:f9:24:36:dc:88:
75:1e:63:9c:9c:c1:e9:73:9b:aa:d1:2a:31:f9:92:ca:3c:cb:
a2:43:33:bd:8b:c1:0c:40:89:44:d7:4a:d8:f4:7d:af:17:c0:
fe:95:cc:ac:5a:64:5b:27:1a:73:53:f4:45:02:db:cc:cf:6f:
57:e0:86:cc:23:f3:72:46:f8:84:8f:c2:f5:55:d4:5d:fd:b8:
dc:1a:b9:33:08:11:0b:60:1f:5c:50:07:45:db:f5:bd:0e:b5:
8a:2f:30:c0:0e:cc:72:67:ca:3c:98:0b:3b:17:40:fc:15:8c:
1a:b2:c4:65:c9:9b:8e:bd:d9:b8:b2:7e:47:16:76:30:b5:f3:
b0:a5:16:1c:82:e7:0a:e1:36:dd:e5:8e:49:6a:6c:6f:5d:f5:
7e:a5:f9:75:75:e3:35:e9:1d:5b:c0:5d:8b:c8:b8:e8:93:f5:
70:bc:1f:d4:5a:e3:74:1c:48:ce:42:ce:5a:83:94:7b:ab:d1:
21:2d:4a:78:1f:f7:ed:f2:08:67:7c:ab:b9:dd:e8:be:48:b8:
c9:c0:9b:54:71:3b:79:fb:48:94:0d:ab:bb:08:33:af:a4:e1:
a0:07:7f:58:2c:c0:a3:c4:47:d0:17:37:12:59:31:77:72:72:
37:a5:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:00 2024 by rpki-client on console-ams.rpki-client.org