Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
File: Eb6TUALwKMF878tfClhoOZJbU0o.cer (raw, json)
Hash identifier: YCbSa7Ywa16DXts7snsHHEvFLa86U9cbSNoG8vjN4wA=
Subject key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021673
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Oct 2024 12:24:03 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 7586
IP: 103.177.44.0/23
IP: 2001:df0:1bc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 12:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136819 (0x21673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 12:24:03 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:dc:26:4a:69:f8:6a:c4:b5:ee:fc:6d:e1:
a3:58:51:24:f8:3d:c1:a3:c5:cc:64:3e:bb:d1:62:
ef:9a:93:dc:90:f2:c1:ea:34:b1:3a:81:b0:13:b2:
2a:63:a9:d8:6e:ae:39:59:19:8c:fd:7a:a9:82:2e:
3e:8e:ef:fb:d7:2e:8d:5e:b5:69:d1:ad:84:31:33:
7a:d5:36:3a:6f:ec:25:98:fc:64:18:4b:b7:be:bf:
c8:c0:86:ad:14:46:e9:22:b6:41:9e:1b:28:c6:2a:
4c:99:14:16:46:2e:45:95:ac:05:c8:a7:4c:f8:a1:
e0:ad:f9:74:c4:91:9d:f0:8c:be:a5:e6:ce:fe:6d:
a4:b2:59:3c:28:c9:dc:e9:cb:2f:c6:9c:3f:1d:16:
b6:7c:f3:02:e8:c9:64:69:5b:8a:74:58:97:01:65:
e9:1d:d3:f6:d8:2e:bc:be:43:cd:17:63:21:cc:03:
3d:01:d9:cb:8a:8e:ce:be:a5:4f:13:40:4b:e5:36:
3a:82:55:ef:90:be:a0:14:1c:c2:72:3f:1a:50:c8:
52:fc:42:4d:14:82:2c:53:10:56:42:40:18:91:02:
fc:3a:b4:64:5f:9d:cd:32:e9:28:5c:e9:47:2a:1d:
8d:8f:52:55:b2:22:5b:7e:bc:9a:5d:be:0f:d7:61:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7586
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/23
IPv6:
2001:df0:1bc0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:5e:77:db:fa:87:52:32:a9:b9:1e:e9:cb:39:43:77:33:f6:
2c:e4:e8:58:16:64:2a:62:de:e1:f6:c9:bc:34:a0:de:9a:e8:
bc:ca:af:2c:ab:5c:a5:5a:ff:17:c3:aa:d0:f1:a6:ec:82:69:
75:7b:49:65:ca:d7:34:d1:44:91:cc:85:e6:c9:a5:36:9e:8d:
9c:39:da:98:23:6c:06:2f:44:0b:69:b0:ee:59:a6:aa:4b:dc:
ae:d6:49:53:74:66:45:d1:95:c2:ca:61:d4:c9:4b:b5:e5:31:
14:ac:5d:50:42:cc:45:47:2a:8c:e6:23:f0:90:ea:a1:1f:50:
cb:85:21:9f:1d:8c:ee:ce:50:e2:ff:11:cc:36:4f:93:20:22:
8f:7e:b1:88:68:62:f4:49:5d:cd:b5:38:53:41:05:36:74:7e:
13:d3:55:06:74:d9:46:be:ae:7b:8b:24:b6:0d:ab:33:3d:e1:
9c:02:d4:0a:f4:07:0f:ea:68:14:91:2a:a4:5a:8b:2d:0e:77:
33:0d:3b:d4:9c:21:e6:b7:32:78:3b:3e:51:7c:e9:6a:5b:95:
ec:6d:c8:a8:3f:33:21:e8:87:31:39:e1:96:11:8f:83:8a:c4:
d0:d8:1a:e4:50:8e:ef:c9:62:ae:10:39:76:bd:fe:19:8d:00:
20:4b:5e:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:35:39 2024 by rpki-client on console-fra.rpki-client.org