Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
File: 9MBkE3SXWli1TsAsEElzLsinCss.cer (raw, json)
Hash identifier: KpuXZDohn7xQrUop1Vlg+NAyXQy0e5uOxsARu9YrAv0=
Subject key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CA31
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Nov 2023 05:17:47 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 139060
IP: 103.139.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117297 (0x1ca31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 10 05:17:47 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:d4:0f:d0:d9:cc:2e:06:73:82:c0:c6:84:
76:0b:67:07:56:ac:58:a5:e1:13:73:23:ea:29:dd:
86:9d:1b:4e:a3:5c:c1:6e:9e:6f:ee:3b:fb:dc:67:
79:32:0b:2f:ef:07:aa:76:4e:d6:f9:31:fb:48:c1:
03:f3:d2:43:c0:c2:89:e8:99:8b:95:e8:bd:05:b2:
4e:12:55:89:23:34:3f:8a:21:1b:57:bc:c3:42:97:
bf:30:ed:2c:93:0a:a0:f6:dd:f8:0e:8e:7c:33:08:
46:88:b9:0b:08:18:8e:c4:7d:6d:d6:de:31:55:52:
c6:d8:36:72:3d:f1:5f:6c:86:1a:cc:d5:20:d6:9a:
1a:ed:8c:bf:6e:e4:28:e8:c6:bd:77:2b:b9:9b:6d:
23:3e:3c:87:91:ae:42:47:a1:63:f1:7e:8b:8a:db:
1b:38:61:f4:00:c9:8f:54:c2:05:a9:ff:e3:53:30:
4d:1a:20:b2:59:62:f0:85:09:cb:be:64:93:72:e5:
9a:bb:3f:91:37:61:9a:57:31:68:99:20:6e:62:8c:
75:a7:c2:fd:8e:4b:66:21:53:b7:9e:1d:a9:0a:c9:
14:ff:bb:9f:31:57:3f:53:07:51:3f:4d:7d:67:6a:
e9:8b:70:fa:78:06:3e:a5:97:40:00:0d:12:46:f4:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139060
sbgp-ipAddrBlock: critical
IPv4:
103.139.20.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ee:33:f9:21:77:93:b5:04:0e:79:72:af:d0:7d:05:59:31:
91:2d:53:9f:7e:f4:54:ce:49:24:4a:57:34:fc:52:64:0c:5a:
ad:e7:f5:dc:50:17:4c:66:c6:f9:1d:9a:73:c2:69:e2:7a:d5:
2b:1b:0e:38:da:a3:fc:14:97:9d:cf:8e:22:01:f9:80:f9:ee:
68:47:bd:8a:7a:6a:02:2c:87:fc:64:2c:30:1a:fc:36:90:8a:
cf:49:8a:7d:cc:c9:bb:c9:cd:12:f7:de:0b:41:74:89:f4:c0:
5e:4c:06:3d:4d:f1:a4:d0:36:c9:c1:85:9a:e0:43:44:c2:d9:
8d:f9:91:ed:03:6b:91:cb:f1:d6:ca:7c:10:89:ba:20:4f:df:
ca:d8:a0:c7:28:30:c2:a1:d4:37:75:5e:b5:ae:b7:d3:6b:3c:
14:53:6c:7a:d2:44:94:ab:92:30:3b:b2:20:d9:b1:18:69:3a:
90:42:89:f4:93:79:28:1f:56:e8:a0:ae:97:c7:47:26:72:2e:
52:6a:da:0e:09:7c:84:74:90:e3:b1:df:35:39:e5:95:54:8c:
08:b0:43:d9:7f:70:34:29:30:b1:ed:cb:dc:b6:0a:c9:7b:b3:
00:aa:3a:e4:54:c7:a8:46:70:e4:ac:e5:1c:57:2e:73:74:9b:
1e:ad:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:02 2024 by rpki-client on console-fra.rpki-client.org