Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer
File: FpJaX5SGv8PxG1GPDfhHOgKruFs.cer (raw, json)
Hash identifier: oITXVc9qUxyZts28lH0Zf6wtNL7I8DsN1MfrlV6rfV0=
Subject key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FC22
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Jun 2024 00:06:41 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 134744
IP: 103.199.0.0/23
IP: 2001:df1:2cc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130082 (0x1fc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 00:06:41 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:e9:93:39:c8:d5:2c:2c:82:50:8a:00:8f:
80:df:d6:e4:50:96:14:06:df:ec:d4:5c:ba:7f:b0:
41:42:80:67:ef:c7:5a:03:e6:b5:ca:66:2f:e7:7d:
97:1f:91:89:27:84:9b:64:74:22:82:fa:89:aa:19:
06:e4:7b:1c:f3:0a:d7:ce:b6:ed:57:9e:55:fd:fc:
e3:73:fe:8d:1e:d3:32:5f:85:a3:c9:02:68:70:f0:
29:0f:c0:7f:84:56:b2:16:69:e0:91:d6:f0:b4:ee:
61:20:0d:63:98:08:7e:5b:98:98:2f:e7:ac:e0:ca:
b6:03:49:18:f4:81:41:2f:bc:3c:4e:3f:48:49:00:
bb:ee:fb:44:4c:f6:2e:74:61:4c:36:41:09:51:1a:
4f:7c:24:69:7b:55:f2:32:1b:c6:79:23:3d:97:c3:
bf:73:7e:ab:b8:7d:5d:64:85:15:3e:ba:b6:8f:e8:
85:f9:41:dc:7a:ff:ba:15:92:b1:ec:03:c8:52:74:
8c:92:5f:51:38:73:6d:9a:24:bc:f9:72:f7:ec:9c:
c4:9f:80:05:62:a4:59:fb:ed:b9:46:ff:f1:f2:d0:
56:6a:c1:e5:aa:8c:09:df:0d:7d:af:fe:57:2c:ca:
68:b5:58:84:93:f0:fd:78:d1:2b:02:ff:f2:4e:64:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134744
sbgp-ipAddrBlock: critical
IPv4:
103.199.0.0/23
IPv6:
2001:df1:2cc0::/48
Signature Algorithm: sha256WithRSAEncryption
39:91:e5:bd:50:fe:6d:cd:c4:73:ac:fd:54:84:c2:80:66:44:
c7:30:78:c5:20:9a:d0:69:1f:b5:2b:fd:d8:f7:e5:85:fc:55:
c4:6e:45:b4:b0:33:bb:a4:da:b8:b6:7d:90:26:69:63:69:4c:
df:ef:9e:95:2a:00:7a:2c:4a:5f:21:eb:87:2f:61:7a:bc:44:
cc:7c:16:1e:47:1e:2f:c8:50:76:09:40:6b:e5:94:6a:b5:ca:
9e:d6:39:fd:90:23:a2:7f:b9:a9:79:26:68:1e:b4:bc:bb:0c:
23:32:7c:e3:1b:03:f8:8b:2c:51:cf:e4:a8:d6:b2:60:0f:80:
4c:55:27:f5:47:7c:6e:32:9f:02:27:41:94:ef:51:7c:e7:39:
b4:a9:27:93:4e:6c:da:29:80:81:25:c2:3c:c2:9c:2b:32:82:
55:89:04:cb:bc:0e:93:31:af:0c:48:86:cc:a9:bb:4c:5f:7e:
a3:e7:3d:ea:6e:3e:ff:e3:aa:15:eb:d5:5b:9d:8c:82:54:95:
16:2b:47:f8:21:ed:0a:ef:1e:55:58:e6:b0:19:74:9f:6e:46:
13:45:a6:4c:75:fc:fd:f9:d5:26:1c:f8:79:7d:b2:bb:1c:16:
b0:f3:f0:01:a6:dc:48:34:82:13:12:8b:fa:8e:c2:eb:b5:c2:
f3:32:ac:4e
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAfwiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYzMDAwMDY0MVoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjgyQzYxMTAvBgNVBAUTKDE2OTI1QTVGOTQ4NkJGQzNGMTFCNTE4
RjBERjg0NzNBMDJBQkI4NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVDemTOcjVLCyCUIoAj4Df1uRQlhQG3+zUXLp/sEFCgGfvx1oD5rXKZi/nfZcf
kYknhJtkdCKC+omqGQbkexzzCtfOtu1XnlX9/ONz/o0e0zJfhaPJAmhw8CkPwH+E
VrIWaeCR1vC07mEgDWOYCH5bmJgv56zgyrYDSRj0gUEvvDxOP0hJALvu+0RM9i50
YUw2QQlRGk98JGl7VfIyG8Z5Iz2Xw79zfqu4fV1khRU+uraP6IX5Qdx6/7oVkrHs
A8hSdIySX1E4c22aJLz5cvfsnMSfgAVipFn77blG//Hy0FZqweWqjAnfDX2v/lcs
ymi1WIST8P140SsC//JOZC25AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUFpJaX5SG
v8PxG1GPDfhHOgKruFswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4MkM2LzlDRTNBRkI2MzY3NDExRUZBREI1MjAxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyODJDNi85Q0UzQUZCNjM2NzQxMUVGQURCNTIwMUNDNEY5QUUwMi9GcEphWDVT
R3Y4UHhHMUdQRGZoSE9nS3J1RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg5YMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ8cAMA8EAgAC
MAkDBwAgAQ3xLMAwDQYJKoZIhvcNAQELBQADggEBADmR5b1Q/m3NxHOs/VSEwoBm
RMcweMUgmtBpH7Ur/dj35YX8VcRuRbSwM7uk2ri2fZAmaWNpTN/vnpUqAHosSl8h
64cvYXq8RMx8Fh5HHi/IUHYJQGvllGq1yp7WOf2QI6J/ual5JmgetLy7DCMyfOMb
A/iLLFHP5KjWsmAPgExVJ/VHfG4ynwInQZTvUXznObSpJ5NObNopgIElwjzCnCsy
glWJBMu8DpMxrwxIhsypu0xffqPnPepuPv/jqhXr1VudjIJUlRYrR/gh7QrvHlVY
5rAZdJ9uRhNFpkx1/P351SYc+Hl9srscFrDz8AGm3Eg0ghMSi/qOwuu1wvMyrE4=
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:31 2024 by rpki-client on console-ams.rpki-client.org