Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
File: 8U1sPT3myxB096LpBdn4VFEEWmU.cer (raw, json)
Hash identifier: 2CAQbIx432cHM1gIWb/XxJeVI5J0flnPjuDe9JGzPWU=
Subject key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C95C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 02:24:32 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.176.228.0/23
IP: 2400:36a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 14:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117084 (0x1c95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 7 02:24:32 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:db:59:c8:e9:8e:28:7b:36:d1:9d:54:37:
cf:b5:f6:50:61:43:9b:03:82:51:63:8e:20:c9:b1:
37:3b:c7:52:41:8e:34:f6:da:99:9b:42:5b:d5:2d:
d4:ce:eb:5d:24:ad:90:8e:ca:09:a8:a0:98:4b:f7:
1c:8f:91:61:f0:47:78:76:07:e2:c3:67:cf:03:33:
a1:06:a0:08:e1:08:26:f9:dc:71:64:69:85:f6:3f:
8b:39:7c:18:0b:e5:04:de:44:73:07:e2:68:f4:9a:
30:00:e7:d7:45:60:dd:47:f5:d9:f7:95:89:59:b3:
86:8c:ef:04:06:9b:4e:43:7a:95:02:b2:27:e0:84:
74:6d:98:88:29:e8:56:4f:da:e2:b5:ed:27:bb:77:
67:46:0b:d8:c4:71:ff:8c:85:cd:19:6b:4a:b8:0c:
f6:ac:69:41:a1:85:4b:c2:a6:72:2f:15:0e:fe:c9:
31:7e:c6:0a:00:72:7e:dd:d4:e1:1a:f9:d8:6d:65:
49:aa:ac:41:48:06:09:c4:18:f8:14:98:c8:06:66:
04:0f:22:c1:2d:74:fd:b3:fe:d3:5f:70:bf:d2:73:
fa:64:45:b8:c9:ff:e4:3e:c1:f7:f6:5f:ba:09:39:
f1:61:c6:72:f1:1c:08:e6:2e:99:ef:c5:00:59:dd:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.228.0/23
IPv6:
2400:36a0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:91:d1:26:b8:20:af:db:1a:0f:e1:e2:2a:d4:a4:a0:17:84:
e1:36:06:ac:ea:43:89:38:38:8e:73:f2:68:8d:f2:90:5b:df:
56:0c:bf:94:50:21:f6:9c:22:c0:38:af:e3:db:ef:db:25:de:
e5:c9:22:79:48:f3:a2:f1:18:db:83:8c:28:3c:92:9e:eb:cf:
27:e4:e5:2a:78:a8:80:0f:ca:f3:7f:5c:32:69:76:12:9c:7d:
7f:c3:cc:2f:c9:c9:10:0e:a3:ea:3d:f9:3d:67:2b:35:8f:04:
af:7b:50:46:51:3a:21:65:5d:aa:91:6e:f3:35:38:49:c6:9d:
d2:1c:ff:8c:15:62:82:30:59:8d:e9:73:76:49:29:9c:76:59:
56:0a:32:ef:66:e0:1c:24:d1:9f:da:1e:8a:4d:68:39:a4:39:
eb:3f:9e:c6:c8:a6:12:04:33:6b:aa:87:19:e0:a0:ec:c1:b5:
10:2e:c9:b7:67:f8:2d:ae:bb:76:36:c2:39:3c:2d:b3:5a:29:
ea:6b:fe:cc:bc:c3:24:ad:13:3f:b8:9e:6e:83:de:f1:e6:18:
42:4e:6f:14:74:a2:79:2e:6e:49:3d:5f:f2:31:45:74:06:20:
94:14:da:36:50:f0:3b:37:b8:53:fa:db:fc:eb:fc:cd:ee:e9:
0d:39:64:6e
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAclcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwNzAyMjQzMloXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJF
OTA1RDlGODU0NTEwNDVBNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdm9tZyOmOKHs20Z1UN8+19lBhQ5sDglFjjiDJsTc7x1JBjjT22pmbQlvVLdTO
610krZCOygmooJhL9xyPkWHwR3h2B+LDZ88DM6EGoAjhCCb53HFkaYX2P4s5fBgL
5QTeRHMH4mj0mjAA59dFYN1H9dn3lYlZs4aM7wQGm05DepUCsifghHRtmIgp6FZP
2uK17Se7d2dGC9jEcf+Mhc0Za0q4DPasaUGhhUvCpnIvFQ7+yTF+xgoAcn7d1OEa
+dhtZUmqrEFIBgnEGPgUmMgGZgQPIsEtdP2z/tNfcL/Sc/pkRbjJ/+Q+wff2X7oJ
OfFhxnLxHAjmLpnvxQBZ3UR5AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU8U1sPT3m
yxB096LpBdn4VFEEWmUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYyMDg5L0UxQzRBNDFFNENFODExRUNCRDA1RkE3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQz
bXl4QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnsOQwDQQCAAIwBwMFACQANqAwDQYJKoZIhvcNAQELBQADggEB
AHqR0Sa4IK/bGg/h4irUpKAXhOE2BqzqQ4k4OI5z8miN8pBb31YMv5RQIfacIsA4
r+Pb79sl3uXJInlI86LxGNuDjCg8kp7rzyfk5Sp4qIAPyvN/XDJpdhKcfX/DzC/J
yRAOo+o9+T1nKzWPBK97UEZROiFlXaqRbvM1OEnGndIc/4wVYoIwWY3pc3ZJKZx2
WVYKMu9m4Bwk0Z/aHopNaDmkOes/nsbIphIEM2uqhxngoOzBtRAuybdn+C2uu3Y2
wjk8LbNaKepr/sy8wyStEz+4nm6D3vHmGEJObxR0onkubkk9X/IxRXQGIJQU2jZQ
8Ds3uFP62/zr/M3u6Q05ZG4=
-----END CERTIFICATE-----
Generated at Fri Apr 19 16:12:52 2024 by rpki-client on console-ams.rpki-client.org