Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
File: 6wFhqozbHyTNf-E9XlzlIXulj4I.cer (raw, json)
Hash identifier: sX92sEZiL1Fmg8/HbkypO6lo9i6sZU/UZYvhpjqJV6o=
Subject key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D82F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jan 2024 17:08:04 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137079
IP: 103.104.32.0/23
IP: 103.107.246.0/23
IP: 116.206.130.0/23
IP: 2402:5d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 13:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120879 (0x1d82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 12 17:08:04 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:c2:72:a9:19:1e:b9:ef:ec:5f:c2:59:c7:
64:93:4c:28:fc:c5:23:d4:39:ea:b0:8c:64:b7:8f:
2a:52:38:cd:ca:25:44:99:31:32:db:98:41:ad:d5:
5c:64:c8:c7:6d:f1:cb:12:fb:e9:73:05:8e:79:38:
d8:86:e4:8c:69:a3:00:65:ee:10:95:05:8a:af:88:
b4:a9:69:e4:35:0d:b5:35:52:d8:10:32:e6:8a:d1:
d7:41:a3:7e:ba:30:28:e1:01:cf:88:69:fd:5b:d9:
a5:50:4a:b6:6e:4b:b8:21:3a:9b:d6:1b:af:13:d1:
b1:c0:e5:89:c0:84:1f:0e:b3:d5:e2:bd:f1:83:1c:
6e:29:97:20:0c:37:6f:70:5e:db:02:2c:e4:b0:03:
a0:3d:28:bc:7b:2e:ce:14:04:a6:f6:0c:1f:9a:31:
43:ec:06:e7:15:56:17:66:4e:80:78:d1:3a:c2:e5:
31:cb:24:b3:34:6e:78:c3:99:c3:99:01:39:70:af:
e7:7d:18:d1:8b:b5:ba:47:c7:18:df:01:06:e5:66:
bd:53:d2:fe:d1:22:3e:0e:37:20:e7:a1:b1:01:ee:
c6:93:a9:4e:5e:1f:a4:39:bf:fe:ec:62:94:f9:5e:
23:5a:2f:ba:fb:1d:6a:fe:0a:c9:7b:42:20:d6:18:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137079
sbgp-ipAddrBlock: critical
IPv4:
103.104.32.0/23
103.107.246.0/23
116.206.130.0/23
IPv6:
2402:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
a8:de:02:7a:9c:ad:06:4e:12:85:e4:c8:d3:63:90:2a:87:a0:
84:3b:c4:d7:d8:bd:74:4c:4b:a7:0b:48:b6:20:8d:9f:73:6e:
ec:35:2b:87:51:9a:72:1e:79:17:77:f8:eb:ad:bd:4a:55:e0:
77:80:3f:26:4f:ee:d1:2c:8a:7a:ef:ce:a0:93:7e:2b:3f:4a:
69:10:8d:cf:78:4c:f0:7c:0d:52:32:1c:a2:71:34:1f:87:84:
1e:48:03:29:9d:3d:b8:3c:4e:73:1c:ee:f1:de:58:3a:87:cc:
e3:8b:ba:6e:70:15:66:23:17:ee:6e:06:e7:22:20:0c:01:51:
5b:9e:69:83:b8:1c:a9:03:e8:2b:79:33:89:a8:a4:4e:4e:50:
43:08:8d:89:ae:4d:83:63:b0:b1:0b:25:44:15:a3:a3:97:4b:
d8:d6:93:b4:3f:26:67:63:6b:43:a9:e2:ed:35:28:ab:42:88:
d0:66:b2:02:d8:0b:da:1b:a9:d6:c9:c9:a6:8b:bf:47:a7:4b:
02:03:f9:09:b7:a2:15:c4:3b:d0:78:3f:09:01:c0:b8:df:f7:
77:34:f4:8b:f1:96:5d:6d:a8:32:c8:56:11:84:29:fe:f0:7c:
d0:5c:7c:f2:b0:98:7b:f4:4b:1a:d0:8e:e0:ba:0d:e2:f2:80:
a0:62:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:22:38 2024 by rpki-client on console-fra.rpki-client.org