Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer (raw, json)
Hash identifier: f2Sej8DRXahdvK/Z5HwMLTu0LU38LXfQalc8FnZ3e+4=
Subject key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ADEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Jul 2023 19:45:14 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 141987
IP: 103.191.74.0/23
IP: 2400:b660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 18:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110060 (0x1adec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 19:45:14 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:aa:ab:0f:0d:20:2b:e3:8a:1a:5b:34:ca:
c6:a9:7f:f5:9d:05:88:6e:ca:0b:d9:ba:03:20:00:
d8:a7:f0:9b:55:22:7f:66:51:da:ae:89:70:f5:64:
58:2f:82:d3:c8:2a:fa:a1:c1:d1:0c:ba:58:f0:4b:
be:50:dd:a8:fe:a1:17:b1:17:03:fd:72:82:62:5c:
a7:5a:7f:ab:bb:50:9e:62:be:fb:90:f5:6e:86:91:
eb:43:24:c3:9e:38:0b:c1:9a:0b:cd:34:5c:f7:02:
65:d5:1e:0f:ee:1d:65:d7:85:e5:6e:6b:cf:e7:29:
e7:0f:05:92:00:8b:7d:0a:51:11:e9:43:d6:0d:d0:
b0:56:4b:24:d7:fd:73:84:c2:29:7b:bc:1f:5c:43:
84:19:36:2c:ae:e2:18:65:dc:f4:5a:42:11:01:69:
e1:89:61:ae:89:ca:55:60:a5:34:aa:de:41:76:42:
1d:2c:33:db:a4:f6:c2:29:5a:c0:70:fd:06:5b:0b:
bf:73:cb:62:38:aa:cd:2f:51:e0:a2:13:1c:3e:60:
66:c0:9a:bf:66:9e:c5:6a:b3:7a:04:38:27:c0:b1:
2f:3b:1f:b3:ea:3d:63:43:17:d6:cc:a5:ab:a8:64:
02:91:a4:4d:32:56:f9:00:fd:ee:53:e7:cb:b1:fc:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141987
sbgp-ipAddrBlock: critical
IPv4:
103.191.74.0/23
IPv6:
2400:b660::/32
Signature Algorithm: sha256WithRSAEncryption
2f:e2:6e:8b:6f:5e:24:89:be:40:dd:7c:41:c4:02:0e:72:c1:
c8:c2:de:14:87:c6:6a:ff:1a:84:49:d9:dc:1f:ec:ba:fd:b3:
cb:d9:f7:56:0e:fa:29:a4:1d:d2:c1:fe:cb:4b:cf:0b:ae:ee:
e8:c0:8c:5a:ff:df:e3:77:5b:3e:1f:a5:94:d3:ea:06:e3:8b:
df:b7:4d:ea:aa:0f:43:92:e0:6c:ff:77:76:9c:3f:22:9c:1b:
b1:e7:0b:66:f3:6e:79:9a:e6:5d:62:4d:fa:19:fc:fa:25:ab:
17:95:8e:88:08:02:a1:7d:30:5c:4e:cd:08:2b:68:f1:c7:36:
71:1b:66:bf:39:e8:10:79:f8:9a:8d:7a:52:45:6f:39:ff:f7:
f0:80:5c:ba:cc:e4:3f:5e:c9:4e:7d:d6:96:a2:2d:16:03:aa:
74:e0:95:59:68:f7:16:7f:7d:1d:21:86:63:e2:e9:71:b7:42:
70:13:74:fd:28:e7:21:ff:2a:66:e7:cf:a6:48:8b:c3:1d:ae:
e6:f2:d5:71:0f:8f:cf:e0:a6:9b:19:57:ff:dd:98:f4:a4:3b:
ee:ea:07:97:aa:ad:37:ad:18:11:0e:eb:44:31:df:ec:4d:ca:
50:30:67:0c:e7:57:49:6c:96:80:04:cf:f6:e1:71:64:19:f7:
e5:f3:ea:75
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAa3sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcwMzE5NDUxNFoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENG
MDQyM0M1QjQ2MjMwMDU5RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCY7KqrDw0gK+OKGls0ysapf/WdBYhuygvZugMgANin8JtVIn9mUdquiXD1ZFgv
gtPIKvqhwdEMuljwS75Q3aj+oRexFwP9coJiXKdaf6u7UJ5ivvuQ9W6GketDJMOe
OAvBmgvNNFz3AmXVHg/uHWXXheVua8/nKecPBZIAi30KURHpQ9YN0LBWSyTX/XOE
wil7vB9cQ4QZNiyu4hhl3PRaQhEBaeGJYa6JylVgpTSq3kF2Qh0sM9uk9sIpWsBw
/QZbC79zy2I4qs0vUeCiExw+YGbAmr9mnsVqs3oEOCfAsS87H7PqPWNDF9bMpauo
ZAKRpE0yVvkA/e5T58ux/HuJAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUGGFTy5iI
OKOm1IzwQjxbRiMAWegwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFFNjlDLzlFQjA3OTk4MTI3QTExRUQ5MDJERkUyN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVp
SU9LT20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiqjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ79KMA0EAgAC
MAcDBQAkALZgMA0GCSqGSIb3DQEBCwUAA4IBAQAv4m6Lb14kib5A3XxBxAIOcsHI
wt4Uh8Zq/xqESdncH+y6/bPL2fdWDvoppB3Swf7LS88Lru7owIxa/9/jd1s+H6WU
0+oG44vft03qqg9DkuBs/3d2nD8inBux5wtm8255muZdYk36Gfz6JasXlY6ICAKh
fTBcTs0IK2jxxzZxG2a/OegQefiajXpSRW85//fwgFy6zOQ/XslOfdaWoi0WA6p0
4JVZaPcWf30dIYZj4ulxt0JwE3T9KOch/ypm58+mSIvDHa7m8tVxD4/P4KabGVf/
3Zj0pDvu6geXqq03rRgRDutEMd/sTcpQMGcM51dJbJaABM/24XFkGffl8+p1
-----END CERTIFICATE-----
Generated at Wed May 1 19:13:49 2024 by rpki-client on console-fra.rpki-client.org