Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer (raw, json)
Hash identifier: nJarzGkRlRmSTHwgUMrFPbHynvnyXz/0y6vlTfINmfo=
Subject key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DD20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Feb 2024 14:04:14 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 17979
IP: 103.83.168.0/22
IP: 203.89.112.0/22
IP: 2400:9440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 03:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122144 (0x1dd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 14:04:14 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:d3:83:1b:aa:f7:74:7f:e1:fb:f9:bb:9b:
58:76:20:6a:9d:b9:b5:20:7e:0e:6d:99:a2:1f:4b:
56:77:67:d1:2f:a5:a5:7f:d4:1d:07:d7:4c:d4:5e:
5e:40:67:b3:eb:cf:db:4e:f8:47:6c:c5:01:95:e8:
93:fc:07:51:af:c2:06:9c:17:b4:fe:8b:e1:7e:dd:
a5:5e:0c:dc:20:af:b6:f6:b6:95:ef:d9:ef:68:9c:
ac:38:cb:90:dd:d4:68:54:94:ce:65:71:6c:53:b0:
1e:72:e5:85:5d:18:eb:f5:d3:98:f3:2b:04:bc:04:
bb:2a:53:f0:5b:b2:c3:d0:35:0a:7d:b4:6b:0c:8a:
2e:6d:53:15:4b:cc:c4:da:6e:59:fd:ec:83:eb:5e:
b4:ae:e0:62:7e:9f:6d:aa:f0:31:8c:bf:d9:29:83:
2e:85:c3:f8:08:c2:63:d1:f8:8d:e9:24:c9:e2:33:
0a:9e:0e:7c:06:02:cb:bf:07:d1:25:63:c1:ac:c8:
33:92:df:85:28:ea:99:f8:1a:85:ee:46:66:70:f8:
46:a8:60:95:5e:ce:21:e4:9d:d8:d7:c6:cc:86:9a:
17:d4:66:2f:3d:a9:53:b1:04:68:9c:15:b3:01:03:
92:c3:2e:0b:fa:77:7c:cf:75:ac:5d:09:fa:8e:4f:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17979
sbgp-ipAddrBlock: critical
IPv4:
103.83.168.0/22
203.89.112.0/22
IPv6:
2400:9440::/32
Signature Algorithm: sha256WithRSAEncryption
be:3f:8e:7d:be:5f:0c:71:9f:86:b6:00:79:6a:d3:06:72:c2:
ae:f8:82:10:38:94:3e:de:25:6e:af:8f:eb:e6:f9:6d:fd:91:
37:b7:3a:73:65:95:fd:de:61:17:41:90:c0:a9:6e:99:2d:ea:
c6:1b:33:19:e1:c4:bd:76:88:5d:d8:27:38:0d:82:21:75:a3:
ad:da:cf:30:df:94:73:0b:e7:28:04:da:b5:e2:f5:7f:43:aa:
89:9c:6e:70:91:63:8f:60:af:15:de:5d:6f:7c:12:3f:ef:be:
4b:17:6c:98:cc:4f:3b:30:e4:af:16:37:7e:5f:c9:33:9a:08:
35:2b:18:2b:ea:d6:00:c3:fe:b0:4e:00:92:04:ad:17:b6:92:
4f:46:b8:a3:6f:68:d3:b4:4a:e5:3b:97:57:55:92:7e:39:c8:
40:1e:20:aa:4d:74:e5:ba:23:97:71:ad:8e:0b:ba:51:d6:29:
7a:50:ec:2b:8b:78:9d:14:5b:8c:50:70:f8:8a:ed:07:2a:1a:
8f:7d:c5:bb:03:b5:4b:b5:69:f9:af:58:d5:2e:32:a3:7d:69:
94:6b:5c:d5:d1:fb:13:ea:12:ad:ce:e0:05:02:07:c8:c4:5e:
bc:ac:26:63:5a:b9:93:bf:f4:5e:57:a7:bb:cd:7a:b3:ca:b3:
c0:ed:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:53:18 2024 by rpki-client on console-fra.rpki-client.org