Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer (raw, json)
Hash identifier: u8B3IiApPa309+TP10c6KyzzcAeu9VPZCZx/wr1CahU=
Subject key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CEE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 20:29:50 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 43.249.92.0/22
IP: 103.23.72.0/22
IP: 103.246.252.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118497 (0x1cee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 20:29:50 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:1c:e9:77:cc:e2:18:c4:d9:cc:6e:dc:74:
9f:8e:c5:71:56:1b:be:3e:4a:e5:d6:fb:6c:ba:5f:
97:7e:bc:25:4c:38:00:a6:d6:c8:cb:e6:37:1a:cf:
e5:bf:74:1d:99:5f:1d:81:0d:ce:15:3b:4b:df:25:
53:a6:6e:64:62:b8:08:8a:d1:a6:2f:dc:49:32:13:
ce:e8:ed:88:71:ec:f0:c7:64:c7:e3:fb:d6:77:d6:
85:0d:8c:86:8f:51:aa:ef:52:a9:cc:3b:38:3c:58:
1d:fa:bf:43:3e:dd:90:60:89:90:1f:38:e1:39:e7:
62:8a:56:25:0f:09:43:3f:65:a0:0f:62:af:60:a6:
90:45:28:29:36:75:d5:ab:57:b5:c4:c0:f9:f2:78:
66:3f:1a:ee:6c:8e:01:04:fd:4b:1d:62:e2:a7:70:
c3:35:22:17:e8:86:35:21:9e:58:02:e3:0f:c6:2a:
bf:a1:28:8b:ae:75:67:77:fe:bd:a8:b1:27:1a:96:
4f:6d:b8:f2:1b:28:62:82:51:0a:6e:0e:a6:48:7c:
74:89:f1:5d:39:a1:8a:04:d5:3b:6b:83:24:24:44:
1d:ee:75:d3:1e:42:d2:e9:ea:12:c9:a7:63:93:75:
f4:0c:00:84:70:54:9b:2c:7c:11:e0:08:b8:c8:e8:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.92.0/22
103.23.72.0/22
103.246.252.0/22
Signature Algorithm: sha256WithRSAEncryption
49:cc:84:2f:b5:a3:f9:f2:77:b3:8a:45:67:e0:2c:c9:13:42:
7f:cc:32:15:2d:e3:95:c7:b4:4b:59:9a:0f:d2:26:7e:e0:f0:
3a:c4:7b:5e:2f:74:e3:0d:63:a8:1b:12:ee:07:3e:64:08:19:
f2:9f:6e:e7:30:0a:b7:c6:cc:21:08:86:f4:59:ac:23:a6:04:
44:7b:2b:6f:e4:92:a9:11:54:43:30:d2:bb:bd:f6:da:3b:59:
46:ae:a2:c2:cc:e7:cc:ca:e5:be:c6:6f:70:95:61:d8:46:6e:
45:cc:1e:e9:9c:30:61:e7:50:78:36:22:c7:64:87:c5:e4:e8:
69:8d:5d:76:bd:0e:50:3c:35:1d:c1:1e:e6:66:81:44:6b:40:
7f:8b:54:62:84:92:a4:90:0e:49:c7:a0:70:c4:5a:6a:43:b1:
3d:e5:3f:e7:52:b6:0b:fc:50:cc:bf:3b:b9:b1:47:b9:cd:3a:
54:8f:52:57:65:23:7d:43:e9:8e:c2:ce:53:34:4b:d7:da:a1:
87:df:7b:b3:24:b7:7c:67:fa:67:38:47:6a:db:97:7b:5b:8c:
e5:0f:58:4c:cd:4b:b4:84:2f:27:7e:0b:b3:e6:3a:26:9a:a3:
16:4a:05:3e:7e:c4:4b:78:82:f1:97:36:95:65:6a:60:be:fc:
0a:3a:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:17 2024 by rpki-client on console-fra.rpki-client.org