Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.cer (raw, json)
Hash identifier: Xm/lExsZbocPy+CGUKHjX+eEENzADgMQbY3qvK1eixM=
Subject key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EE0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Apr 2024 18:11:06 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 138602
IP: 103.134.84.0/24
IP: 2001:df7:c100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Oct 2024 20:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126477 (0x1ee0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 29 18:11:06 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:b2:03:8a:a3:16:2a:56:5e:16:20:38:62:
bd:08:46:cb:1b:f1:c7:7d:cd:17:8d:ce:19:9f:14:
e4:bb:f9:7f:e8:e7:a5:55:d0:86:74:31:61:ce:4c:
5e:91:6f:ad:ee:30:70:c4:db:5e:c4:a3:09:fd:2e:
65:ca:35:39:23:e5:4f:5c:e2:f2:2f:ad:54:0a:b8:
78:45:59:66:e4:b6:83:4f:5c:d1:e3:de:53:3d:d0:
aa:9f:06:5f:cb:0c:e9:b5:e9:1a:c2:53:4d:25:1f:
44:ba:a3:9d:2b:36:0e:eb:b0:3f:f2:62:1e:63:30:
fb:5d:08:50:98:94:3d:43:45:15:b7:29:93:a3:39:
ef:e8:f4:f9:dc:f2:af:b4:bf:0c:f7:4a:05:ae:38:
95:3f:67:84:8e:59:52:59:6f:c9:9f:89:f7:8f:c6:
2b:8c:1d:ce:c3:98:85:a0:cc:71:db:55:2d:14:0b:
5b:d2:53:09:09:ee:df:be:4c:45:38:67:ff:4b:fc:
34:5c:d0:63:f9:ae:e4:5c:54:e1:77:ea:9f:bc:69:
39:9e:6c:ca:d0:54:7f:24:3d:f5:22:60:1a:17:f2:
40:e2:10:dc:4e:c1:24:ec:d6:22:71:8e:12:02:d4:
e6:49:99:ab:04:6b:97:2d:39:3b:38:2f:71:ce:f2:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138602
sbgp-ipAddrBlock: critical
IPv4:
103.134.84.0/24
IPv6:
2001:df7:c100::/48
Signature Algorithm: sha256WithRSAEncryption
ac:a3:9e:c9:42:9b:4e:37:96:ea:9c:0d:d0:fe:7a:29:26:0a:
d8:71:57:43:d0:c7:2c:50:53:71:f0:0e:f2:9a:60:be:00:2d:
7b:7d:b2:bd:eb:71:a3:7b:de:12:ef:34:8e:bd:f0:2e:e5:09:
ff:78:a4:d0:e1:bb:da:11:44:5f:7f:41:c8:07:56:4d:b2:ae:
eb:2a:4d:62:56:a6:4f:37:be:e9:22:df:f3:28:86:f4:a8:77:
02:ea:3c:f9:af:f1:fd:5d:bd:4a:20:f7:aa:a0:4f:95:f1:4e:
e6:73:41:ac:a5:d1:e8:50:b9:73:f1:c8:bd:04:d2:7e:6b:a3:
8e:92:65:8b:09:ab:f6:04:95:dc:88:2c:6f:b2:2c:93:1a:02:
bd:95:72:bb:65:65:8e:fc:e2:83:41:c9:76:70:8a:94:2f:d4:
81:e8:18:b6:e5:bf:06:55:45:73:5c:ad:cb:92:a6:ff:d1:47:
8c:53:fd:8e:28:22:a3:b5:d4:6b:6a:90:22:30:35:85:6e:c9:
99:50:d8:40:a5:81:b4:68:bf:4b:b3:04:74:0c:c8:c3:89:4d:
33:6c:01:6a:d4:98:77:9e:de:1b:18:9e:44:04:81:5c:09:dd:
ab:eb:18:02:84:0d:28:6e:a1:9c:ca:f7:a2:17:2e:71:e5:36:
e0:cd:7c:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 17 23:09:46 2024 by rpki-client on console-fra.rpki-client.org