Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
File: Ht151WWBY19_MpfG0nDHN0l4nj0.cer (raw, json)
Hash identifier: ipLxXGLAm2tk2Gntm9RtrpISTHyZWQ+JlM5XL4GnPto=
Subject key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020D10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Sep 2024 16:29:19 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 45422
AS: 133869
AS: 133942
IP: 101.53.160.0/19
IP: 103.49.32.0/22
IP: 182.50.76.0/22
IP: 202.129.242.0/23
IP: 2401:ce80::/32
IP: 2407:4100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134416 (0x20d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 16:29:19 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:88:12:01:18:21:93:d8:fb:28:a1:27:91:
b9:86:51:7a:a5:db:4b:84:14:91:bb:14:99:eb:38:
ca:7f:5f:ff:86:89:84:4c:5d:33:97:83:72:73:c3:
c0:2f:72:ed:9b:10:1f:b2:08:02:9f:5f:5f:bc:16:
be:7c:90:1c:1d:7d:95:3b:00:e8:40:2d:25:5f:9b:
2a:d4:91:df:4c:bf:4a:37:21:d2:5d:0f:b1:c1:fa:
4c:3f:35:13:bc:25:5c:6f:f7:40:91:46:af:18:0e:
44:03:43:0d:27:3f:dd:0a:dc:05:58:ab:cf:f0:46:
8f:ed:d0:00:a1:ee:d0:07:de:89:63:d9:88:98:55:
ac:00:11:b3:8c:e4:a6:b6:42:62:27:38:fc:7d:8e:
7a:e2:5a:b1:32:d3:39:ea:8e:cb:ed:e6:2a:d0:7b:
31:2e:aa:8f:96:21:ba:26:2e:80:3b:43:5a:f0:82:
56:1e:8b:d8:52:e6:89:60:44:41:7e:f7:4d:84:cf:
67:12:79:59:7f:c0:5c:82:34:ff:6f:bc:f6:3e:6d:
35:17:e2:b5:e2:6e:9b:db:5a:ee:07:06:cf:df:99:
17:2a:d8:60:99:d8:7a:7d:7c:c0:36:fc:0f:08:7f:
ff:be:da:71:65:60:a2:e1:b3:35:06:21:e0:fb:81:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45422
133869
133942
sbgp-ipAddrBlock: critical
IPv4:
101.53.160.0/19
103.49.32.0/22
182.50.76.0/22
202.129.242.0/23
IPv6:
2401:ce80::/32
2407:4100::/32
Signature Algorithm: sha256WithRSAEncryption
83:b8:2f:ee:fd:f7:d1:fb:4f:83:42:9f:f6:e4:c5:9a:e0:2a:
61:ab:8f:ea:f2:af:c7:62:f6:02:1c:d3:ea:3c:f7:98:5c:4d:
22:96:cf:0d:cc:d5:ee:33:42:28:b1:6f:86:54:8e:9a:3c:b9:
e9:e7:c7:74:e5:d0:68:9e:13:33:f3:16:a3:8f:63:bb:b3:05:
6b:be:5f:52:7b:8d:5d:db:9c:e3:e7:c6:f7:64:83:6b:20:2e:
29:44:51:d7:ad:a8:cd:59:a1:35:56:43:e3:e7:3b:63:a4:85:
1f:8c:05:d7:4e:bb:15:24:a7:da:81:7b:1d:a2:5b:2a:b2:e7:
2e:ae:49:12:25:e9:75:26:47:54:1d:06:5b:7c:e3:44:53:ac:
82:1d:42:0c:47:f7:89:ad:51:27:c2:29:97:ac:87:be:50:65:
49:3d:27:a2:a0:b8:19:c7:56:ca:29:c0:d1:0b:37:0f:ca:e8:
14:48:48:7e:81:d2:6e:b2:f2:58:e6:15:10:ac:83:19:b3:92:
66:00:95:8d:63:ae:86:62:f7:55:f0:13:90:66:83:ea:98:fe:
58:ff:a9:68:26:24:5f:03:bb:b3:04:e2:0c:e5:ba:8b:1a:49:
60:b4:ad:e3:78:73:24:09:0d:66:75:c0:34:3d:b3:16:7e:4d:
c4:bd:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:33 2024 by rpki-client on console-ams.rpki-client.org