Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
File: Aul8r2u1VIcberzm6NeDIOuURpE.cer (raw, json)
Hash identifier: uTSe/4u/ckxIl+WgrzYpbreqZ9kI32kKvYzMPXku/qI=
Subject key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0209C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Aug 2024 16:34:14 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 133466
IP: 45.112.36.0/22
IP: 103.4.124.0/22
IP: 2401:d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133569 (0x209c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 29 16:34:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A917A47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:9a:a7:6c:77:ff:85:96:e5:5f:60:0b:7c:
7b:d0:73:9d:19:ed:a4:f9:39:89:ec:3c:65:fb:24:
3a:5c:88:fe:dd:50:b6:cd:b3:53:2f:ef:c0:ee:ce:
07:aa:f4:bd:ac:85:28:af:22:3c:40:73:eb:7b:58:
0f:de:d7:66:37:fb:a1:39:3f:68:95:48:be:0c:cd:
1d:f7:3a:72:d5:99:99:c5:12:47:83:ba:3b:e0:c5:
d6:07:75:5e:8f:d8:ce:5a:1b:28:3e:3c:84:ee:fe:
3b:8f:18:df:0e:de:62:27:f5:ef:d7:b1:2c:05:f1:
54:87:4a:51:b0:4c:d1:45:7d:e2:7b:94:82:d7:c6:
7c:61:a0:32:5b:7a:8c:26:92:2f:31:d6:05:f7:40:
f7:47:9b:b6:a4:c3:12:14:86:a0:6e:c9:10:81:df:
8a:c3:36:cd:77:6c:28:31:2a:0b:4c:e1:d8:bc:c1:
11:8a:eb:ce:4d:22:63:77:a8:b4:58:0f:eb:ce:97:
83:b7:57:fd:31:f1:01:c8:05:00:77:26:70:1f:ec:
f3:e1:8d:6a:c0:fc:eb:e4:54:56:09:20:07:5e:fc:
30:01:e7:4a:78:ee:0e:84:3b:27:08:c4:75:58:37:
db:67:20:ca:64:65:ef:78:de:55:8c:ec:5c:7b:e8:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133466
sbgp-ipAddrBlock: critical
IPv4:
45.112.36.0/22
103.4.124.0/22
IPv6:
2401:d00::/32
Signature Algorithm: sha256WithRSAEncryption
cb:aa:5f:72:ca:6d:04:29:c1:58:1b:b5:e8:5c:a7:cd:31:73:
a7:64:19:d7:27:6b:17:56:fa:8c:b0:28:89:37:24:99:8f:94:
c9:a3:ad:b0:73:c1:03:5f:fa:2b:76:42:fb:37:18:f0:c0:54:
8f:01:61:69:16:17:d7:3e:a1:00:f6:70:be:b6:06:11:b9:57:
26:54:83:83:7c:72:c4:7f:e3:6a:09:eb:a2:96:70:d2:3b:77:
30:0e:e7:d8:1f:92:7e:37:8b:83:8c:e7:16:cc:d4:f9:ca:0d:
cb:b4:0a:80:50:9e:4a:fa:ea:96:55:52:75:30:7f:39:ff:3a:
a5:51:1e:ea:d3:9c:87:90:b7:6c:05:4a:dd:41:0f:4c:b8:32:
6f:f4:49:28:9f:00:fb:0a:0c:0c:fa:78:0a:b1:54:e6:92:05:
66:3f:f8:72:94:22:e5:5c:6b:de:a6:6e:93:2f:35:d3:b1:99:
b7:83:6c:ab:ff:83:3b:09:1b:43:e4:1f:5e:aa:35:e8:35:f0:
61:ac:6b:82:4e:d7:a3:f7:f5:61:62:ad:ab:37:03:fe:0a:27:
2c:1b:32:c9:bb:3c:78:77:0e:4a:69:0b:31:b5:e6:34:de:08:
07:97:17:ba:39:dd:00:cc:5d:bb:77:fa:be:52:5f:58:60:0d:
2d:92:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:34 2025 by rpki-client