Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.cer (raw, json)
Hash identifier: 1MQ2RVUxs3Nhk+PmpkTfJ8qAtejNCCAt/0++obdVH9k=
Subject key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D4E5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Dec 2023 04:23:50 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 17887
AS: 45667
AS: 58430
AS: 64045
AS: 132842
AS: 139010
IP: 43.247.56.0/22
IP: 103.11.12.0/22
IP: 103.106.8.0/22
IP: 202.60.192.0/20
IP: 203.159.72.0/22
IP: 203.159.96.0/19
IP: 2405:6d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120037 (0x1d4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 29 04:23:50 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:ef:15:a3:c1:d7:41:9b:13:54:85:08:c2:
e8:eb:43:70:7a:ff:c3:d7:95:23:37:1c:9e:69:0c:
60:2f:5a:da:ba:af:ac:30:73:cf:fa:84:db:af:0e:
ca:f7:31:fc:13:a8:d4:aa:ab:84:b9:c4:93:a9:51:
5c:7a:42:41:4b:d5:ae:61:83:7b:8b:31:0c:45:6f:
63:0d:71:09:25:89:0e:cc:cc:78:85:70:69:f9:69:
ec:d9:02:ee:b8:24:b2:f7:51:15:dc:ba:ac:11:05:
45:b2:d2:00:63:9a:36:4d:43:92:c2:6a:7b:47:76:
86:9f:80:f4:9c:84:f3:b6:ce:72:85:76:b9:3a:c6:
73:77:12:fc:b2:dc:91:2c:97:62:ba:8d:ba:1c:ca:
5e:84:ec:d2:a8:95:9c:ff:a3:dd:0e:75:8d:92:7b:
2f:e0:bd:07:8a:02:12:0c:fd:49:3f:c9:4f:a1:c2:
ae:80:e9:98:1f:4b:a0:01:5a:9b:4f:6f:bb:3c:4d:
a3:be:0a:6e:1a:a6:3f:11:29:58:14:15:c6:57:fc:
5d:89:d1:d5:c1:0b:e3:62:d7:a4:38:f1:1d:ec:6a:
4e:2d:97:be:f7:4b:b3:0c:4e:d7:8f:6b:87:26:23:
bf:55:fe:cd:41:0c:aa:62:dc:03:c1:3f:61:59:d1:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17887
45667
58430
64045
132842
139010
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
21:1f:df:1b:0d:71:06:a7:de:3a:cf:9f:5f:3b:0f:05:8a:a5:
f2:c8:1b:a5:4c:50:fb:4d:21:76:e5:b6:b7:c6:a3:a1:e1:a7:
b0:c0:ac:c1:8d:5c:bc:c2:fb:80:18:9b:02:04:68:45:fc:50:
ce:cd:57:76:71:aa:eb:c8:41:e8:7c:30:10:41:50:2e:25:f2:
09:29:58:f2:c0:f8:47:00:73:d4:2d:ee:6c:cf:21:92:f4:0b:
cb:5f:d9:f2:df:74:26:6b:d8:b1:e3:55:92:0c:7e:c5:02:ab:
4c:09:cf:e8:72:3b:74:e3:95:e0:ec:87:1e:7e:24:cf:4d:34:
51:59:6a:12:34:0e:09:dd:e4:ec:81:22:5f:da:b8:75:b2:e0:
a0:2e:c5:27:75:e2:4f:a1:e5:83:db:06:93:57:7b:99:09:5e:
f6:71:05:db:65:40:aa:db:31:c3:ee:ba:5d:32:16:57:55:c3:
96:96:09:e0:24:30:8b:ed:7d:1e:54:7c:50:e5:f5:84:16:39:
24:ca:31:6e:5e:8a:9b:7a:db:ea:07:45:d3:34:54:1b:92:28:
7c:cc:10:6d:39:b8:69:55:fb:e2:2a:8c:a6:03:4a:8d:94:93:
33:96:78:99:53:51:a8:89:51:27:08:47:6f:62:03:07:3b:e8:
0c:97:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:47 2024 by rpki-client on console-fra.rpki-client.org