Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
File: AQtAe3X24zjzr7WajWJxXDwC7PQ.cer (raw, json)
Hash identifier: OI+u9Pf7O/MucB9R3KGNKx4WM3XWj9yBm+iF4HC69qI=
Subject key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E132
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Feb 2024 13:24:43 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 137403
IP: 103.107.160.0/22
IP: 2402:5840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123186 (0x1e132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 13:24:43 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:a2:ce:c6:1e:a6:b5:a1:df:d4:b5:20:aa:
2a:8b:fc:fd:c9:3f:64:39:31:ba:6e:46:7d:ad:5b:
d8:f5:40:09:e0:ab:c5:1b:68:18:ed:f4:6c:b3:2a:
ed:72:1b:77:68:e5:5c:34:3a:6a:fe:32:f9:02:2e:
68:31:c6:32:95:95:6d:ce:87:7f:53:9a:13:50:7e:
53:8b:a6:b8:1f:43:3a:7a:2b:ef:48:2a:3b:11:56:
fb:94:a2:7f:ca:f5:98:4c:ee:78:be:a3:88:e6:12:
3d:3f:59:87:50:a2:3a:9d:c1:71:d3:fb:b6:45:44:
3c:b4:29:06:9f:39:6e:46:c2:ff:1e:0b:12:6e:0d:
0f:4e:2a:6f:1e:6f:c5:05:46:53:0e:57:c4:9b:93:
c9:c7:9c:6b:53:04:81:de:80:40:d5:5a:41:1c:db:
94:c4:2a:23:62:36:66:ab:18:42:7d:35:8f:33:b4:
2f:5e:11:12:87:fe:e1:18:14:af:d6:ea:3f:c1:00:
92:ac:f2:c1:9e:d9:ab:c3:41:ea:0d:ca:9b:a6:5b:
17:99:84:d3:99:b2:9e:e8:77:49:70:ef:83:1e:3b:
26:ea:c0:a2:57:6b:07:ef:c3:cb:b5:53:fe:28:6e:
16:7e:14:68:72:ad:05:16:bc:b3:56:bc:f4:d5:38:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137403
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
4a:e6:ab:c8:b8:b1:06:80:a3:79:1c:97:72:bf:e0:3a:2c:71:
9d:5f:8b:e1:99:30:ef:0e:61:51:cc:f7:bc:aa:e1:45:fc:4a:
89:59:d8:36:49:da:7f:87:6e:95:9b:aa:58:e3:3f:09:17:63:
26:51:9c:7b:8b:4e:df:07:0d:34:9e:d4:68:d3:1b:ae:41:8a:
fc:9c:5d:c3:3b:53:d8:e8:c6:62:a6:bd:71:2c:dd:80:b1:58:
67:21:1a:b7:71:7d:9b:cc:5a:fe:0b:bf:06:9d:fd:16:d9:56:
e0:c4:e2:b5:97:9a:13:e2:6b:c1:88:76:31:0f:ba:70:78:2c:
24:e1:c9:4d:30:04:75:47:20:0a:be:66:50:2b:bd:fd:c3:ba:
a7:4c:5a:95:c7:fc:41:4d:c9:e3:9d:3f:d0:f8:70:fa:6f:dd:
87:8f:d8:18:11:19:6a:04:e1:1d:94:16:b3:43:96:38:44:ab:
ae:2d:76:f9:e1:1f:2c:aa:fa:c1:8c:36:26:91:9e:e7:bd:0c:
62:94:2e:0c:b0:58:60:f1:d3:c6:bf:76:2b:96:2e:8c:e2:cc:
af:c6:73:d4:75:c4:57:65:18:1f:85:e7:c5:f5:7c:88:61:ba:
a5:ad:60:c9:25:35:73:2a:39:27:61:0d:34:32:83:91:43:66:
37:01:96:32
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAeEyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIyODEzMjQ0M1oXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5
QThENjI3MTVDM0MwMkVDRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBFqLOxh6mtaHf1LUgqiqL/P3JP2Q5MbpuRn2tW9j1QAngq8UbaBjt9GyzKu1y
G3do5Vw0Omr+MvkCLmgxxjKVlW3Oh39TmhNQflOLprgfQzp6K+9IKjsRVvuUon/K
9ZhM7ni+o4jmEj0/WYdQojqdwXHT+7ZFRDy0KQafOW5Gwv8eCxJuDQ9OKm8eb8UF
RlMOV8Sbk8nHnGtTBIHegEDVWkEc25TEKiNiNmarGEJ9NY8ztC9eERKH/uEYFK/W
6j/BAJKs8sGe2avDQeoNypumWxeZhNOZsp7od0lw74MeOybqwKJXawfvw8u1U/4o
bhZ+FGhyrQUWvLNWvPTVOFO3AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUAQtAe3X2
4zjzr7WajWJxXDwC7PQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMyRUM3LzI5MzQ3MjZBRkE3ODExRTc5Q0I2MDg3REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNY
MjR6anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhi7MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2ugMA0EAgAC
MAcDBQAkAlhAMA0GCSqGSIb3DQEBCwUAA4IBAQBK5qvIuLEGgKN5HJdyv+A6LHGd
X4vhmTDvDmFRzPe8quFF/EqJWdg2Sdp/h26Vm6pY4z8JF2MmUZx7i07fBw00ntRo
0xuuQYr8nF3DO1PY6MZipr1xLN2AsVhnIRq3cX2bzFr+C78Gnf0W2VbgxOK1l5oT
4mvBiHYxD7pweCwk4clNMAR1RyAKvmZQK739w7qnTFqVx/xBTcnjnT/Q+HD6b92H
j9gYERlqBOEdlBazQ5Y4RKuuLXb54R8sqvrBjDYmkZ7nvQxilC4MsFhg8dPGv3Yr
li6M4syvxnPUdcRXZRgfhefF9XyIYbqlrWDJJTVzKjknYQ00MoORQ2Y3AZYy
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:08:24 2024 by rpki-client on console-ams.rpki-client.org