Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.cer (raw, json)
Hash identifier: KRo+TXsc6KMHtI/4hdx3RiZbqeK7vdXtzO5O8EOAJI8=
Subject key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0205A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 Aug 2024 18:26:26 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 137567
IP: 103.113.184.0/22
IP: 2402:c040::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132521 (0x205a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 18:26:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:70:d5:4b:8b:21:73:40:30:85:87:36:bc:
0b:43:06:57:ca:e1:d5:c2:68:25:7a:5f:60:78:4a:
ab:cc:a3:d3:c2:52:7d:95:59:07:47:d0:c8:b9:fc:
c2:ee:54:12:c0:ef:f5:a6:c3:78:b0:e2:99:6c:0a:
bd:00:76:6d:cc:22:0b:6e:c5:53:88:be:56:a6:78:
dd:12:9d:cb:64:39:d8:4e:b8:e5:96:a5:f7:6b:2d:
5f:66:b8:8a:da:f3:3b:bc:4b:b5:a3:ea:a4:33:74:
3e:93:7f:e1:61:42:b2:c3:74:51:95:a1:58:fb:39:
af:b3:9d:d3:ef:f3:a8:f2:cd:08:8f:d4:d6:ff:92:
4f:b6:31:3d:bc:e2:8b:27:4f:04:8b:f7:2a:30:f8:
a6:21:3a:cf:11:92:f2:40:6a:eb:2e:12:22:e5:2b:
cf:24:05:ba:22:d3:bb:e6:97:f2:d7:5b:22:fe:aa:
cd:eb:ec:b3:19:84:80:2a:8f:b2:07:a6:ca:78:3c:
ef:8e:03:4f:f9:4b:c8:d0:97:ce:7d:54:7d:44:08:
70:27:aa:ea:26:4e:96:93:21:b8:1b:04:c5:c4:22:
ca:22:f7:05:57:98:ab:62:96:6f:0e:b9:65:ec:c5:
fd:c2:03:bf:26:a6:a3:f2:58:bb:dd:63:31:b4:15:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137567
sbgp-ipAddrBlock: critical
IPv4:
103.113.184.0/22
IPv6:
2402:c040::/32
Signature Algorithm: sha256WithRSAEncryption
c8:e3:05:4e:c3:a6:57:f6:34:43:82:79:25:38:d7:25:01:ff:
91:0c:7c:44:c1:15:7f:64:a4:2d:39:f6:db:aa:55:7b:7f:4d:
de:aa:f3:d0:2b:2d:14:29:b4:41:a2:1f:3f:81:68:8d:11:88:
3a:c2:49:7c:19:b0:c2:5d:e0:75:0e:1a:60:b0:8a:85:2c:85:
8c:c5:01:64:7e:dc:27:a4:50:d2:18:07:1b:4c:7b:72:e4:71:
74:30:c8:ce:e9:eb:7a:b1:45:db:54:5d:ce:78:31:63:53:0a:
55:ed:c8:04:de:a3:be:90:64:8b:48:85:10:17:67:b0:97:5c:
ca:fe:e7:25:d7:da:e7:a8:41:a6:07:78:cc:69:db:3b:43:ce:
e2:73:0d:2a:dd:96:4e:df:83:5e:40:84:27:c9:74:b9:3c:7b:
9d:2e:1e:a1:46:f6:d2:9b:dd:bd:73:cf:22:2d:68:d7:5a:73:
67:7d:5a:93:ac:d3:a6:f7:4a:8e:d6:55:67:c2:f3:4a:5e:34:
93:44:bc:31:64:fe:2b:23:48:05:f6:f4:f2:2c:6f:27:fb:98:
f5:ed:bf:ba:6d:4e:e8:9e:fa:9c:6c:3f:17:51:64:ee:24:55:
68:be:fc:a2:54:07:67:39:2b:b0:cc:99:36:8d:d8:54:89:8a:
59:1a:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:04:44 2024 by rpki-client on console-ams.rpki-client.org