Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
File: CfwHfzPjrWe_FHdVFno61OrLHnw.cer (raw, json)
Hash identifier: AjvxZG8f9+Lfkzhj7M5iAqTKbMMTS+OW0QpdwJo5DPE=
Subject key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DA79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jan 2024 15:29:12 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 9658
AS: 9670
AS: 17445
AS: 18005
AS: 18190
AS: 18389
AS: 38180
AS: 38262
AS: 45330
AS: 45449 -- 45450
AS: 56100
AS: 56164
AS: 58526
AS: 58635
AS: 58748
AS: 131212 -- 131213
AS: 131228
AS: 152173
IP: 49.157.0.0/16
IP: 61.28.128.0/18
IP: 112.196.224.0/19
IP: 112.199.0.0/17
IP: 113.61.32.0/19
IP: 115.84.224.0 -- 115.85.63.255
IP: 116.50.128.0/17
IP: 117.104.240.0/20
IP: 120.89.0.0/18
IP: 180.232.0.0/16
IP: 202.0.91.0/24
IP: 202.164.160.0/19
IP: 202.175.192.0/18
IP: 203.167.64.0/18
IP: 2403:a000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121465 (0x1da79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 25 15:29:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:77:60:c1:20:ec:eb:eb:b4:00:42:7d:df:
63:5c:2b:7f:5d:9f:2f:ce:85:ed:f7:84:db:1d:46:
e9:92:9d:c1:dd:6b:e1:35:d6:16:da:48:a5:a6:14:
4c:00:22:c7:36:ea:fe:91:95:c0:1f:00:0e:7e:65:
ae:11:36:68:b8:2b:9f:ab:24:7a:40:11:91:86:00:
cb:55:a5:47:00:61:3c:22:c2:7a:00:24:21:17:5e:
bf:eb:45:24:5c:c0:2e:5c:0a:d4:f5:61:4f:0f:9a:
6d:63:f6:b2:df:1f:1e:c8:17:e3:9a:e8:7d:f8:48:
cf:48:02:d3:fc:dc:de:29:af:2b:e4:27:ef:a5:cf:
3b:4d:3c:1d:a7:62:79:8e:85:60:ca:04:a3:4b:97:
df:ce:c3:02:87:f4:93:08:c3:a9:5d:36:a6:bb:2f:
38:ff:22:d2:9f:92:d7:6c:bf:7c:1a:89:77:4e:0a:
f4:ca:98:ff:f3:2c:f3:34:95:bf:eb:c9:5a:ac:d6:
71:14:7f:03:a8:79:9b:fc:84:18:3a:b4:4d:a2:d1:
0d:e9:1f:c6:7f:57:56:1e:5a:ca:cb:08:56:7e:f9:
43:a1:82:ff:59:43:1f:3e:41:ba:9f:a5:79:5e:a3:
20:98:d0:1f:83:d3:d5:f3:79:02:41:20:d9:4f:4f:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9658
9670
17445
18005
18190
18389
38180
38262
45330
45449-45450
56100
56164
58526
58635
58748
131212-131213
131228
152173
sbgp-ipAddrBlock: critical
IPv4:
49.157.0.0/16
61.28.128.0/18
112.196.224.0/19
112.199.0.0/17
113.61.32.0/19
115.84.224.0-115.85.63.255
116.50.128.0/17
117.104.240.0/20
120.89.0.0/18
180.232.0.0/16
202.0.91.0/24
202.164.160.0/19
202.175.192.0/18
203.167.64.0/18
IPv6:
2403:a000::/32
Signature Algorithm: sha256WithRSAEncryption
c0:54:eb:45:4f:cd:9e:00:43:25:fb:e3:95:7c:66:5a:ca:e1:
cb:f0:a2:ef:c9:dc:80:4b:aa:82:0a:6d:e3:e8:10:1d:7c:53:
b1:26:1b:85:35:45:64:5a:00:fc:58:86:00:28:bd:2c:c0:35:
41:9a:6c:65:64:65:95:d5:9a:fa:c0:5f:e6:87:42:f6:28:1e:
c9:c9:7c:89:d2:18:ea:5d:49:b9:fc:4d:e3:8f:e5:63:3f:13:
48:8a:71:67:54:a8:6e:1f:52:13:5e:b7:5c:20:3d:c9:44:e0:
e1:e3:cf:34:1d:62:65:e2:b3:fc:2a:56:07:7c:5b:30:5a:94:
e8:9a:db:2e:13:42:5b:27:1f:9c:01:e7:f0:d4:0c:7b:45:f5:
25:8a:4e:dc:f5:01:b5:6e:c1:8b:84:6a:95:94:76:89:40:57:
fd:51:fa:73:9f:02:49:06:db:d9:4a:10:c8:a3:16:cb:62:ba:
43:25:22:ac:da:f8:4b:6f:e0:f8:4a:93:f1:98:f0:f9:2b:1c:
51:4c:a2:85:f8:37:2e:6b:4f:1c:5f:93:b9:da:98:29:94:bd:
ba:9c:59:81:81:60:77:a3:4c:46:4c:73:44:62:b3:b2:5e:74:
1a:c7:de:50:b1:e1:f3:39:67:e6:3f:a9:b9:df:ea:b4:da:99:
de:47:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:03 2024 by rpki-client on console-ams.rpki-client.org