Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer
File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.cer (raw, json)
Hash identifier: 4tcEYexKw8TlYwAcR/CG9IX0K++FjAtBL3LxEeW5//g=
Subject key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021913
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 12:29:39 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 133142
IP: 103.101.215.0/24
IP: 2001:df6:f000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137491 (0x21913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 5 12:29:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91175FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:60:52:e2:c3:37:2c:2a:69:37:82:f5:f7:
a3:18:32:fc:34:91:a7:58:97:e0:e5:b0:12:a4:8d:
57:6c:80:ea:70:f5:08:cc:f5:92:b8:d8:af:08:31:
24:46:74:95:d5:fb:e3:51:59:b7:98:13:9d:d4:44:
eb:ab:9a:ce:87:76:32:ae:0e:12:77:c7:e9:0c:a0:
ed:6a:b5:1a:a8:c6:ba:c3:30:18:d7:19:3f:14:12:
21:6c:37:d7:a7:08:d0:96:cc:e4:e7:82:9d:7e:87:
4a:0c:73:89:4e:62:c2:7f:14:4b:12:90:d1:c6:1b:
86:98:b8:35:64:71:3c:d1:8a:c3:ac:bf:4b:e7:5f:
3f:ea:1c:da:ce:9b:a9:51:d4:ba:4e:4c:28:af:dc:
1c:0a:7f:b1:ba:38:66:e4:7b:44:87:4e:e0:a3:ab:
c7:ca:40:de:46:33:c5:d6:2e:98:c6:f7:97:1f:76:
3c:a8:45:47:01:3e:5d:6a:5f:52:2e:d9:6d:5b:8a:
ca:e3:dc:f2:14:84:20:6b:e6:c9:24:7b:79:73:c0:
dc:18:a3:5d:21:e2:45:eb:90:87:4e:d9:61:38:d1:
c6:56:8f:d2:e3:3a:bb:31:d5:a9:10:82:d1:3a:60:
bd:44:64:76:9d:56:75:10:7e:12:d1:2b:e1:ec:64:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133142
sbgp-ipAddrBlock: critical
IPv4:
103.101.215.0/24
IPv6:
2001:df6:f000::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d9:7b:80:9e:4f:98:6b:a1:60:cc:a0:2d:2e:af:fe:da:b8:
31:b5:b8:b2:0a:34:bc:f5:f8:85:5f:ba:cb:24:c0:1a:76:64:
d8:ee:11:9a:9d:b4:a1:35:c0:12:45:a0:7a:51:ae:0d:c3:c6:
9e:d9:87:6a:02:96:2f:17:3c:e6:28:3f:7e:9f:bb:0e:be:f6:
67:8c:f7:b3:5e:a8:08:dc:df:c1:07:3d:d5:6b:b7:24:eb:01:
c6:87:4d:41:25:f5:b1:6b:22:78:1e:23:84:9b:14:49:eb:66:
13:e9:7d:b9:e2:2e:76:fd:20:c7:64:51:28:ff:e4:fc:f9:79:
c5:f8:be:6c:b8:f5:0c:9f:dc:38:55:ac:52:b7:ee:1b:77:29:
aa:40:69:b3:01:7f:29:20:c9:1f:f2:c3:4b:cd:86:be:56:92:
86:0c:79:01:24:c2:11:42:02:8b:99:f4:12:6d:ca:27:6c:c8:
ef:65:cb:7b:ce:c5:32:ee:4f:42:d4:4d:a9:73:a9:5f:9e:cc:
53:32:ac:b3:0d:99:de:16:cc:6f:c0:82:a5:57:3d:d7:90:30:
e5:07:43:3d:cc:e1:ec:2f:79:96:3e:e4:51:dc:45:5c:42:f1:
04:bd:d5:06:38:cf:42:ce:98:80:1b:fc:a2:47:7f:d2:52:97:
e1:2d:52:56
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhkTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNTEyMjkzOVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQz
ODQ4REJENzY1QkZCMjM1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn0mBS4sM3LCppN4L196MYMvw0kadYl+DlsBKkjVdsgOpw9QjM9ZK42K8IMSRG
dJXV++NRWbeYE53UROurms6HdjKuDhJ3x+kMoO1qtRqoxrrDMBjXGT8UEiFsN9en
CNCWzOTngp1+h0oMc4lOYsJ/FEsSkNHGG4aYuDVkcTzRisOsv0vnXz/qHNrOm6lR
1LpOTCiv3BwKf7G6OGbke0SHTuCjq8fKQN5GM8XWLpjG95cfdjyoRUcBPl1qX1Iu
2W1bisrj3PIUhCBr5skke3lzwNwYo10h4kXrkIdO2WE40cZWj9LjOrsx1akQgtE6
YL1EZHadVnUQfhLRK+HsZIEnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU8n/4duRl
5zyaUv04SNvXZb+yNdQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3NUZGL0UxNzZENjdBRDA5NTExRTlCMzQ1QTA1REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVS
bDV6eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAggWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2XXMA8EAgAC
MAkDBwAgAQ328AAwDQYJKoZIhvcNAQELBQADggEBAC3Ze4CeT5hroWDMoC0ur/7a
uDG1uLIKNLz1+IVfusskwBp2ZNjuEZqdtKE1wBJFoHpRrg3Dxp7Zh2oCli8XPOYo
P36fuw6+9meM97NeqAjc38EHPdVrtyTrAcaHTUEl9bFrIngeI4SbFEnrZhPpfbni
Lnb9IMdkUSj/5Pz5ecX4vmy49Qyf3DhVrFK37ht3KapAabMBfykgyR/yw0vNhr5W
koYMeQEkwhFCAouZ9BJtyidsyO9ly3vOxTLuT0LUTalzqV+ezFMyrLMNmd4WzG/A
gqVXPdeQMOUHQz3M4ewveZY+5FHcRVxC8QS91QY4z0LOmIAb/KJHf9JSl+EtUlY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:09 2025 by rpki-client