Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
File: CfwHfzPjrWe_FHdVFno61OrLHnw.cer (raw, json)
Hash identifier: Vd4cw/Pcpq+9b0pSHt9BZ8ns0nFpmbmhNfaEwJ3Gxqk=
Subject key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F52C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 May 2024 06:00:14 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 9658
AS: 9670
AS: 17445
AS: 18005
AS: 18190
AS: 18389
AS: 38180
AS: 38262
AS: 45330
AS: 45449 -- 45450
AS: 56100
AS: 56164
AS: 58526
AS: 58635
AS: 58748
AS: 131212 -- 131213
AS: 131228
AS: 152173
AS: 152896
IP: 49.157.0.0/16
IP: 61.28.128.0/18
IP: 112.196.224.0/19
IP: 112.199.0.0/17
IP: 113.61.32.0/19
IP: 115.84.224.0 -- 115.85.63.255
IP: 116.50.128.0/17
IP: 117.104.240.0/20
IP: 120.89.0.0/18
IP: 180.232.0.0/16
IP: 202.0.91.0/24
IP: 202.164.160.0/19
IP: 202.175.192.0/18
IP: 203.167.64.0/18
IP: 2403:a000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128300 (0x1f52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 31 06:00:14 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:77:60:c1:20:ec:eb:eb:b4:00:42:7d:df:
63:5c:2b:7f:5d:9f:2f:ce:85:ed:f7:84:db:1d:46:
e9:92:9d:c1:dd:6b:e1:35:d6:16:da:48:a5:a6:14:
4c:00:22:c7:36:ea:fe:91:95:c0:1f:00:0e:7e:65:
ae:11:36:68:b8:2b:9f:ab:24:7a:40:11:91:86:00:
cb:55:a5:47:00:61:3c:22:c2:7a:00:24:21:17:5e:
bf:eb:45:24:5c:c0:2e:5c:0a:d4:f5:61:4f:0f:9a:
6d:63:f6:b2:df:1f:1e:c8:17:e3:9a:e8:7d:f8:48:
cf:48:02:d3:fc:dc:de:29:af:2b:e4:27:ef:a5:cf:
3b:4d:3c:1d:a7:62:79:8e:85:60:ca:04:a3:4b:97:
df:ce:c3:02:87:f4:93:08:c3:a9:5d:36:a6:bb:2f:
38:ff:22:d2:9f:92:d7:6c:bf:7c:1a:89:77:4e:0a:
f4:ca:98:ff:f3:2c:f3:34:95:bf:eb:c9:5a:ac:d6:
71:14:7f:03:a8:79:9b:fc:84:18:3a:b4:4d:a2:d1:
0d:e9:1f:c6:7f:57:56:1e:5a:ca:cb:08:56:7e:f9:
43:a1:82:ff:59:43:1f:3e:41:ba:9f:a5:79:5e:a3:
20:98:d0:1f:83:d3:d5:f3:79:02:41:20:d9:4f:4f:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9658
9670
17445
18005
18190
18389
38180
38262
45330
45449-45450
56100
56164
58526
58635
58748
131212-131213
131228
152173
152896
sbgp-ipAddrBlock: critical
IPv4:
49.157.0.0/16
61.28.128.0/18
112.196.224.0/19
112.199.0.0/17
113.61.32.0/19
115.84.224.0-115.85.63.255
116.50.128.0/17
117.104.240.0/20
120.89.0.0/18
180.232.0.0/16
202.0.91.0/24
202.164.160.0/19
202.175.192.0/18
203.167.64.0/18
IPv6:
2403:a000::/32
Signature Algorithm: sha256WithRSAEncryption
af:0b:85:81:ee:f9:5b:47:9f:10:35:82:fc:5b:a8:66:4d:41:
76:91:24:35:c2:8f:9e:88:dc:a5:01:a6:48:20:71:7a:f4:98:
72:24:8d:e8:97:4f:c8:1e:e7:85:fd:9a:74:de:44:5b:e6:14:
c7:4c:fc:95:63:f4:53:ff:7f:52:71:d2:b8:68:11:22:00:0c:
fa:9b:cd:b1:ad:00:40:46:ac:a5:c5:36:18:ea:1c:6d:82:43:
d8:bb:80:ea:25:b7:c2:1a:f7:a6:e7:9f:62:fc:be:55:89:79:
41:8d:2c:af:2e:4d:2b:5f:85:1c:51:2c:48:de:6b:28:27:7d:
7c:d0:04:8a:22:3a:9b:58:94:5a:0c:c1:ce:77:d8:2a:dc:0b:
bc:86:b4:30:e3:a9:5b:5c:dc:e3:3d:61:b1:17:e0:85:15:13:
fc:da:0d:95:21:37:ad:91:f0:b9:30:64:f3:98:bf:e0:f7:9f:
2e:5e:16:29:94:e0:58:9c:20:e4:46:99:34:cc:1f:fb:80:c6:
93:b0:8c:9a:e1:0c:ef:c6:7c:63:d7:07:42:33:b6:13:84:72:
69:72:3a:b1:bb:26:bc:42:ac:9e:a4:bd:7a:f1:2e:f6:97:11:
a5:73:8b:22:0d:ba:9a:63:df:f9:8c:c2:8a:bd:73:bc:b5:c5:
fc:e6:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:29 2024 by rpki-client on console-ams.rpki-client.org