Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer (raw, json)
Hash identifier: FvwnQ815GjE80LVDVmzHxGKDwp8+GoEJCWPRm97d3JU=
Subject key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E357
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Mar 2024 13:04:26 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 141421
IP: 103.84.56.0/23
IP: 2400:dce0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 06:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123735 (0x1e357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 7 13:04:26 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:57:46:1f:b2:f1:30:1d:1d:e4:ea:eb:3b:
47:15:35:09:88:3c:42:38:29:42:74:fd:99:f3:e9:
32:f8:a1:03:b9:e9:f4:22:d0:9f:e9:93:ca:80:29:
a5:40:c6:86:0a:e6:ac:17:11:4a:6d:18:30:2b:90:
c1:77:de:42:cb:a4:90:43:35:06:c3:be:dd:88:08:
0d:8b:bd:71:ce:22:f0:dc:63:b5:ad:f2:82:6f:c6:
3b:20:8c:58:a3:1d:0c:c2:58:b9:f2:da:b7:4f:44:
cb:2c:54:7c:ae:f7:47:f6:71:9e:56:f7:63:f2:17:
91:df:25:1f:34:dc:14:68:97:5f:19:14:95:f0:f3:
0b:de:30:f4:53:9c:eb:a5:f7:e6:fb:d5:33:52:81:
1b:b1:72:da:d2:7f:84:9a:d3:36:e3:2f:6b:2e:fd:
87:aa:4f:1e:21:64:8d:e1:d1:9f:d8:b8:39:e4:f9:
58:72:44:53:18:3f:00:e6:ca:16:a9:e9:27:2a:f9:
fd:1c:76:0a:4e:f0:48:67:55:fe:1b:eb:fd:59:08:
d8:7e:c3:1f:3b:7b:a6:a5:38:35:9c:bb:0c:39:f2:
36:45:e8:5b:4e:4a:ba:4c:52:bd:23:60:7c:a4:16:
7a:3b:07:7b:a2:fe:6f:9f:d7:08:e2:da:49:22:3f:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141421
sbgp-ipAddrBlock: critical
IPv4:
103.84.56.0/23
IPv6:
2400:dce0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:d3:6a:a1:76:18:84:ba:5e:69:ce:cc:b1:6a:a3:e0:0b:f5:
61:09:13:8a:de:0a:b2:7c:bf:65:73:78:f0:bf:5e:08:ba:27:
68:10:2e:24:d3:cf:8b:ab:b2:bf:df:06:aa:2f:bd:f3:6c:db:
dc:a9:55:99:96:3d:6e:47:e3:11:d6:fe:74:07:d1:90:92:32:
fd:4d:f5:d8:94:3e:a5:0b:c4:3c:55:05:13:fe:28:54:c2:3b:
81:ee:d5:d5:14:bd:70:74:ad:25:37:e0:69:23:6f:1f:ab:73:
1a:03:28:5e:74:e6:75:db:02:d8:8a:2f:f6:48:4b:46:c7:be:
78:96:47:33:41:0c:8d:6b:a3:b0:d0:06:c0:47:65:e8:0e:c0:
cc:7b:99:2f:d3:ec:79:fc:20:ba:b7:a8:c2:7d:be:77:f6:c1:
c6:c2:df:f3:72:90:d1:be:81:d5:61:48:33:90:58:ea:bf:6a:
a5:c6:e0:cf:ea:b3:62:81:e7:5d:1d:32:62:79:ef:38:e2:ad:
e4:23:ba:61:45:12:28:95:50:af:cb:21:fe:9b:e8:12:22:17:
46:19:5e:e7:23:80:6f:d2:93:b9:1f:8c:e5:5b:86:3c:36:0d:
0a:3f:ec:ff:76:b0:52:ae:b3:14:cd:0d:39:1c:5c:cd:7e:e9:
e0:54:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 06:54:56 2024 by rpki-client on console-fra.rpki-client.org