Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
File: FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer (raw, json)
Hash identifier: nHpEVYnbX+/+wMzmA2yU8m2e+UhjJBOmn3975HhtonA=
Subject key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 06:29:16 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 132025
IP: 103.148.228.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124078 (0x1e4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 15 06:29:16 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:54:24:ec:17:ec:13:c2:2d:7c:b8:dc:9d:
b1:c9:f7:af:74:6a:df:66:ab:a5:db:0d:35:f9:9a:
e6:96:17:f9:4a:c5:e6:7f:25:bb:c4:99:94:28:01:
3e:94:8b:82:0a:92:8e:d8:d8:01:52:7d:43:93:b9:
ea:2d:25:ee:9f:91:a7:64:f5:a7:95:3e:e4:9a:76:
4c:dc:f3:c2:9f:30:2b:87:d1:e0:d9:45:d9:b0:e1:
17:f4:61:ea:14:5e:d4:bc:36:3a:81:68:74:14:e7:
2d:bb:93:94:47:af:35:94:48:1f:b0:95:69:8f:13:
cd:0f:c8:cd:68:1c:2b:f2:67:06:7c:c8:6f:ac:aa:
49:3a:70:fe:d4:fc:48:43:e5:8d:49:7e:fa:93:31:
f2:74:80:44:a2:cd:82:df:44:cf:cf:46:bd:2a:b8:
e7:34:36:b6:1b:d9:ac:b4:54:d7:1b:71:5a:63:51:
ee:87:c6:f6:fb:8c:70:4d:d0:32:41:c8:92:9a:87:
9b:a8:85:78:99:5c:aa:95:8d:f5:1b:76:9d:e9:59:
89:c1:20:0c:3d:de:b3:54:3a:e6:0f:ee:31:a9:bb:
bf:9d:06:58:31:58:d2:12:74:74:52:47:0a:48:ac:
bf:43:81:20:88:7c:9a:2f:e0:69:ab:dc:df:36:b8:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132025
sbgp-ipAddrBlock: critical
IPv4:
103.148.228.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:59:fe:38:8a:ef:8b:a6:28:cd:8b:7c:78:a8:d0:f8:e6:cb:
71:8b:7a:fe:7b:62:c6:77:c1:fe:35:03:dd:0c:85:d2:a3:ec:
e6:8b:6f:d1:8d:a5:eb:de:02:6b:47:d2:ad:67:01:5d:b9:86:
a5:4b:51:37:9e:9b:21:91:b2:9d:d1:63:8e:e1:0f:a4:64:f8:
0c:97:8a:f0:e9:99:96:17:75:dd:50:1d:02:7b:f8:b7:15:7c:
34:c4:22:e2:d3:09:45:06:89:75:21:77:9e:64:b7:71:20:7e:
ad:b9:01:f9:b0:01:98:cb:01:33:a7:02:59:c6:46:95:d9:93:
2c:19:62:61:c5:46:6b:ce:84:55:bf:5d:66:a6:84:ff:43:7d:
20:0e:9b:e2:83:21:88:f1:fe:49:7b:13:6a:b6:1a:62:ed:5a:
60:18:7d:8d:81:ae:72:1c:a8:c3:9e:5d:b4:13:7a:4f:74:ec:
f0:d0:a3:72:12:a0:e7:0e:bd:43:fe:fe:0f:c0:f4:d4:c9:90:
b5:af:27:15:60:bd:ec:d6:31:fb:bb:5a:37:0b:2a:de:68:7e:
1d:7e:9d:65:85:e5:24:5e:05:48:e5:ff:d0:bb:ad:50:00:ca:
40:20:c7:73:66:7a:54:29:b7:8c:13:2c:c1:74:7f:26:4a:c6:
34:47:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:08 2024 by rpki-client on console-fra.rpki-client.org