Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
File: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer (raw, json)
Hash identifier: 6RL0IATdxHOmKfO17lb4d1vUntmbHG+tCzwqkrsSxLs=
Subject key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AA04
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Jun 2023 07:20:02 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 151403
IP: 103.221.66.0/23
IP: 2401:aa0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109060 (0x1aa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 14 07:20:02 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:ea:08:a1:7a:6a:41:1a:5a:2d:3c:2d:6a:
60:28:f8:34:43:72:b6:b7:7c:b9:54:61:fc:ec:47:
a7:0f:23:a9:b9:ec:2c:03:93:37:35:77:4c:e9:68:
5e:bf:d2:15:cd:bc:c5:f2:53:73:c5:c2:2d:c7:af:
f3:4f:82:a4:b1:84:66:e8:be:38:7b:b2:12:e4:b4:
4b:fb:0e:c2:11:41:03:61:64:1d:b3:5c:ba:f7:df:
e1:be:3a:d2:48:e0:24:d1:5b:8b:4d:8d:b6:e1:e3:
03:ef:04:06:d7:1a:ed:70:58:61:19:c8:0d:a5:62:
6a:05:c6:84:76:16:2f:ba:a2:db:7a:84:18:44:bd:
4d:06:e7:16:9a:7c:99:6f:c7:10:40:54:5d:a3:7e:
6e:e7:5f:69:4d:81:c1:b9:7e:61:1e:72:23:0a:08:
87:20:a3:5f:80:a7:67:43:f4:24:bc:e9:46:f6:47:
88:7a:c2:f6:6c:db:a7:0d:10:1a:83:ca:aa:c7:cd:
64:4b:38:f5:9b:b7:19:54:25:6a:74:9f:ef:ca:48:
ef:3f:ac:c1:60:9d:5e:6f:b2:94:2a:10:41:d2:cc:
38:f1:a1:1d:90:07:35:30:d1:0d:83:62:3e:a9:37:
be:73:e1:2a:31:4e:dc:df:5d:c9:da:b5:60:19:a5:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151403
sbgp-ipAddrBlock: critical
IPv4:
103.221.66.0/23
IPv6:
2401:aa0::/32
Signature Algorithm: sha256WithRSAEncryption
c6:ca:87:a5:ad:83:e8:3e:f8:60:76:d8:41:df:35:5e:3a:a5:
d2:ce:c0:24:1b:eb:7f:80:c5:4d:58:40:e3:d5:ca:b1:f8:06:
aa:7d:33:6f:33:ec:7c:f7:26:03:63:f2:75:66:54:74:6f:79:
a6:69:b5:82:6a:5b:25:ee:b0:85:d0:65:81:a4:e6:ad:67:fc:
2c:c8:a9:fb:37:90:b7:58:09:f1:1c:ed:4c:34:5d:82:01:3b:
57:a8:70:d6:14:83:ac:00:6f:ff:ac:82:51:69:3d:59:4b:26:
40:25:3c:c7:4f:4b:b8:4c:6e:15:39:7a:45:ea:5f:ff:35:f9:
34:f9:ac:4a:b0:5d:a5:da:23:b7:28:d0:58:95:1c:e6:d6:f3:
8f:55:4e:8e:72:55:49:09:c8:d4:7b:0f:75:80:fb:31:71:dd:
1b:2d:9d:06:47:17:65:cc:c2:1a:ec:80:41:05:43:d6:c9:ae:
86:de:19:3a:8b:2c:6a:4e:e4:ec:ff:fd:0e:56:f8:cc:d9:db:
d1:56:ea:31:c1:68:bc:b2:cc:96:79:1e:33:b5:f3:cd:0d:3b:
db:93:fa:0d:07:66:f4:c3:d1:08:14:e8:cb:1d:29:2f:f1:25:
a0:79:e6:60:52:f2:7c:6f:9b:0d:d8:b7:c3:ff:3a:ab:5f:9d:
d3:a2:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:23 2024 by rpki-client on console-ams.rpki-client.org