Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.cer (raw, json)
Hash identifier: XgEgJbmC1hLvNLA2DAH/46MmcFi3yMQASQVG1cBwcN4=
Subject key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E25B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Mar 2024 15:29:09 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 132125
AS: 150795
IP: 103.247.72.0/22
IP: 2402:f300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123483 (0x1e25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 15:29:09 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:2e:66:db:ca:1a:ae:df:46:34:a8:2a:c3:
91:37:a1:08:38:30:d1:90:81:97:ff:8d:da:d5:a2:
d7:4a:1d:71:e8:b1:e9:2a:aa:20:2d:05:91:cc:0c:
ab:8c:bd:19:4f:a7:3c:0b:a1:75:0e:ca:6e:ee:d4:
73:87:76:6f:85:89:7b:26:5c:6e:11:70:ef:de:dc:
eb:15:b4:8c:89:e4:ec:4b:82:c8:5b:30:1a:a9:9e:
30:9b:8c:a4:15:66:a6:39:4f:ca:c9:ab:20:20:78:
43:ea:96:71:1e:83:b9:04:f3:23:f1:ec:b7:3b:7f:
9e:73:45:86:0e:1d:1f:f5:48:06:7a:02:64:aa:05:
7c:8c:b9:d4:7c:6b:04:68:f8:3a:84:0e:d6:04:2e:
23:06:e2:c0:0c:a3:18:ef:ad:e4:ea:14:f5:cc:34:
cd:46:8f:99:7c:18:53:c3:3f:dd:95:f6:c9:99:4d:
df:7c:73:42:84:06:1b:78:db:7c:9f:f5:29:85:13:
c0:8f:5a:f9:83:c2:16:ce:52:6f:57:6a:9d:bb:c8:
e7:56:b6:f7:36:09:60:de:7f:9e:6d:18:05:92:99:
9b:c0:75:10:b0:89:b5:c8:25:b9:24:a5:96:b9:a1:
5d:5d:d1:dd:9a:0b:b7:d9:59:a4:4d:f7:ea:05:6f:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132125
150795
sbgp-ipAddrBlock: critical
IPv4:
103.247.72.0/22
IPv6:
2402:f300::/32
Signature Algorithm: sha256WithRSAEncryption
76:13:5c:2a:32:f9:3e:e6:59:c9:16:fc:86:eb:7d:7e:ed:c5:
9d:53:be:e0:6c:2a:40:08:b4:36:3f:20:1d:7a:e9:78:08:ab:
99:ab:49:54:10:07:fd:ce:3c:1a:22:e9:d8:b3:24:37:d3:e8:
ac:73:e5:e0:2f:95:16:f5:44:7a:72:d9:ca:8b:b8:01:1b:f1:
ec:63:ae:0b:73:de:a9:7c:b7:c8:6d:19:d3:7d:ed:47:dd:a1:
49:23:ff:4a:c3:0e:8d:f2:36:0f:4a:05:70:48:7c:de:b0:5a:
11:fe:ba:a8:d3:e9:62:b2:3f:da:bd:f3:7a:a4:7e:13:e3:42:
85:d4:0a:4d:2a:38:e6:ce:0c:2f:f4:d4:9b:f4:03:a7:1e:a1:
0d:55:f0:d2:96:3a:d7:65:27:63:84:18:bc:6a:8f:70:c4:06:
8c:0c:c5:c8:7d:d1:7e:3e:4e:0d:21:7d:5a:5b:1f:71:71:d1:
5f:72:5c:6a:cb:2f:8e:80:25:cd:10:40:a1:68:1c:9b:66:76:
b3:43:0f:c8:93:24:82:a4:79:2c:1a:de:c1:60:e5:92:ef:c4:
84:91:d8:a2:af:5a:29:0b:80:0f:2d:be:82:95:c4:5f:2f:44:
5c:6a:e5:73:fe:4a:d6:6d:eb:d1:54:cf:0f:d6:12:76:51:43:
3e:66:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:15 2024 by rpki-client on console-ams.rpki-client.org