Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer
File: IWrR11qT4DeulPbJGJbS1YLY_1Q.cer (raw, json)
Hash identifier: dYS+v8wlggChSHi4Hpmh7AJqrU3iPcTnJ/wnhw54JKc=
Subject key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0218C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 18:03:47 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 133093
IP: 103.126.80.0/23
IP: 103.243.17.0/24
IP: 2407:fd00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137413 (0x218c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 2 18:03:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91FDDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:12:86:84:fd:84:5f:fe:45:b3:60:46:eb:
d0:27:8c:7e:6e:b7:58:4a:85:e8:55:b7:c4:78:ff:
d8:b8:44:ff:eb:e2:b2:a6:c5:f3:b4:8d:92:af:0e:
c6:53:a7:c1:18:cc:0c:e7:0b:ef:e9:01:72:18:7e:
a0:a8:62:f7:19:b8:c6:69:23:ee:ad:5c:67:e4:97:
e7:8c:b1:bc:d9:d0:8a:ae:88:1a:72:44:ce:f1:37:
45:24:85:3d:fb:91:5f:c1:94:a5:25:24:32:dc:7e:
a8:7d:90:9a:37:e2:9f:0f:34:e6:38:50:9b:ba:7a:
db:d7:d9:ef:6b:46:ca:7f:fa:1c:73:4a:f2:17:8e:
48:b9:b9:e2:aa:d8:20:ae:91:25:66:d6:c4:aa:79:
c9:3f:cc:90:76:4b:47:08:31:fe:e5:29:c2:12:0e:
60:29:3d:ae:b9:c4:29:8b:43:96:77:54:90:d4:e2:
7e:78:11:1d:6c:c1:0d:c9:0b:b1:aa:a3:1a:e6:b5:
04:46:1b:83:fc:a4:19:33:f6:3d:28:ee:a5:65:14:
ee:cc:64:95:71:6a:ab:b4:e2:7a:55:e9:57:37:04:
f6:27:d8:88:e5:10:0c:f4:3c:5e:4c:27:a8:e1:d3:
91:8c:55:16:bb:2f:25:75:29:3b:c7:a9:03:e9:44:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133093
sbgp-ipAddrBlock: critical
IPv4:
103.126.80.0/23
103.243.17.0/24
IPv6:
2407:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
66:12:85:55:6f:0c:3c:54:c3:78:e7:6a:d5:5b:2d:86:17:d9:
8f:94:3c:f3:92:d7:3d:0a:14:c2:07:a1:22:56:02:1e:88:30:
55:e9:75:04:f0:5a:a5:f1:0a:52:b7:db:bb:fc:11:1b:c9:a5:
78:1a:f8:5c:b1:ae:1d:94:44:58:65:5e:51:98:f3:b7:c2:b7:
46:71:18:9d:76:c8:95:ac:b6:31:25:ab:45:d0:f7:2b:68:f0:
ee:68:1e:f6:04:30:e7:91:82:08:1d:63:6e:d4:fc:45:99:9e:
c7:fa:d2:b1:06:49:3c:85:06:d0:05:41:f2:95:f0:b4:a5:22:
ac:f3:fb:ef:6c:7c:09:58:25:5e:29:32:80:13:a1:58:b1:a5:
92:6f:8f:a7:4a:83:ff:a5:88:d8:47:2b:33:fd:c4:8d:d3:66:
e6:8b:9e:db:14:d8:0a:bd:db:6c:17:3e:b7:4c:e7:9a:85:63:
88:91:cb:23:82:24:ac:62:11:3a:e4:28:0b:78:3e:11:cf:36:
cf:1f:d7:db:76:d9:eb:86:28:56:7f:97:ce:a7:2f:0d:a7:1a:
6d:cf:52:f3:7b:88:28:02:09:de:d1:97:0d:02:58:ab:22:ce:
b5:8c:eb:b4:01:e5:21:d7:e6:1e:db:e0:e9:03:50:38:9d:a5:
4a:3b:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:18 2025 by rpki-client