Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer (raw, json)
Hash identifier: CdQjXUd2gOvRx8Nt40U0ETpzY2FtgzEietT+Q/1nX4A=
Subject key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B493
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Aug 2023 20:54:37 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 136513
IP: 103.152.86.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111763 (0x1b493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 20:54:37 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:88:3c:c7:d5:20:a6:15:29:9e:66:61:b7:
a5:65:6f:5e:4a:99:cd:2f:2d:ca:86:d8:56:6e:6b:
26:9c:11:89:84:4c:a2:04:c9:3e:ac:83:b6:6d:e9:
f7:16:49:48:aa:af:26:a9:20:42:50:2d:82:bb:a3:
01:be:83:63:28:89:57:4c:c7:19:33:42:af:8c:aa:
aa:34:20:e8:48:a8:8f:57:11:48:f0:c2:ff:69:df:
bd:15:ca:92:5f:d3:50:7d:56:a8:ea:91:64:79:e7:
07:5b:8a:aa:2e:1c:53:76:51:8d:76:cb:4f:a8:3c:
3b:cf:54:5e:33:61:8f:cd:4e:0c:5a:cd:5a:0c:7e:
6e:44:5a:8a:57:33:3c:8c:d5:3f:c1:3f:71:b0:f3:
c3:5c:76:53:ed:f9:85:f5:62:5b:96:00:ea:d7:4e:
99:d8:1d:93:45:51:7a:6c:3a:33:54:4b:10:e3:66:
15:18:9f:f0:d2:39:2b:46:fb:73:77:d9:67:4a:9e:
79:cc:dd:d9:bc:b2:65:0f:8d:6e:8c:18:a2:d8:f5:
3d:42:8f:97:1a:17:89:14:8f:b9:b8:74:dd:de:53:
77:00:d0:e0:8c:5c:00:ab:af:0b:80:d9:f0:9c:18:
20:11:fa:56:87:63:a6:e4:f4:19:f9:b3:ad:3f:44:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136513
sbgp-ipAddrBlock: critical
IPv4:
103.152.86.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:13:49:84:4d:dc:6f:e9:ed:00:9d:8d:63:c2:9c:91:9a:d5:
f3:df:82:8b:f3:70:50:7b:02:ad:64:75:40:85:8b:7b:41:a6:
b6:7f:bb:b0:26:f1:06:cd:7d:99:e4:5f:77:59:92:df:3d:eb:
c0:4b:a5:d7:12:c3:39:3a:e5:c3:f5:4c:6e:1c:3c:e9:d5:f3:
74:3f:d4:6d:f0:97:3a:33:fa:c7:5f:df:d8:79:92:60:fa:6c:
0d:9d:bc:0e:e6:66:60:55:6d:af:7f:ee:f5:f4:bc:54:6d:e2:
ab:0e:d7:5c:a2:e1:11:32:71:74:58:85:01:78:af:c8:4b:3e:
9c:33:7e:b0:72:7f:03:a6:a6:c2:0d:aa:6d:31:9f:a1:5a:5b:
9d:7e:1e:48:fb:9a:99:96:be:9b:47:91:63:8c:d7:c1:f5:1f:
00:b9:24:7d:bb:1d:68:0b:ff:77:ec:56:5a:d6:48:cb:18:37:
4b:dc:35:27:be:ff:19:e1:22:b9:6f:14:6a:f1:1a:a6:4b:c0:
8d:0b:e4:9b:10:cd:87:e2:b1:2a:4a:a1:64:12:38:3f:05:28:
dc:e7:40:35:55:b6:55:b8:75:c7:01:59:93:41:d9:c0:80:2f:
01:dd:63:b7:3f:b9:db:2d:bb:d4:32:3b:dd:2e:07:ab:16:90:
72:af:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:08:24 2024 by rpki-client on console-ams.rpki-client.org