Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
File: JM96JUWnTqJVAgG27duZ-b7bgbU.cer (raw, json)
Hash identifier: rRkmOmzm8uWU89i5iXjQ/NkFrkfe+/Y5RdUiOLos/xg=
Subject key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CB37
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Nov 2023 18:20:35 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 58431
AS: 134408
AS: 134442
AS: 134679
AS: 135150
IP: 103.11.212.0/22
IP: 203.217.162.0/23
IP: 2404:6980::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117559 (0x1cb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 15 18:20:35 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:0e:9b:b7:c5:13:7b:98:9f:15:62:6e:66:
d3:5e:46:78:12:5c:e4:7e:b8:57:85:b3:b7:91:47:
9b:5a:fe:71:7a:7a:1d:f4:25:58:03:6d:bf:2e:b2:
cf:fc:9a:44:2b:1c:77:3d:09:69:bf:e4:f6:a4:5d:
06:f9:48:9d:26:db:b0:07:af:a8:8a:eb:d6:09:28:
aa:e5:2d:7a:4f:53:53:49:a7:31:45:71:e4:26:d1:
c1:ba:98:8a:69:14:8b:ca:d6:e8:81:8a:b8:0b:51:
ba:d4:12:af:f9:ef:fd:19:38:ed:d8:e3:96:5c:0b:
99:2e:11:1f:3d:d3:8f:e0:86:fe:b7:74:94:c0:0b:
a1:85:a1:5a:9e:0a:90:b4:49:ca:4d:e2:a8:39:bc:
a3:1e:5d:89:fb:3b:f8:c8:f4:ed:9a:89:a8:a8:e2:
75:e0:a2:08:c6:f8:3d:29:7a:fd:82:e7:95:a7:57:
09:9a:54:4e:01:e7:3a:71:9e:10:77:1f:d7:e3:49:
ae:3f:cb:20:79:ca:cc:56:6b:03:00:53:3a:bf:e0:
8f:02:9e:38:97:42:54:1c:29:0c:a9:9e:9a:60:32:
72:83:30:14:f1:1c:1d:97:4f:df:7b:3a:89:9a:84:
50:04:a3:f8:14:ff:d7:88:09:33:d6:82:44:d7:18:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58431
134408
134442
134679
135150
sbgp-ipAddrBlock: critical
IPv4:
103.11.212.0/22
203.217.162.0/23
IPv6:
2404:6980::/32
Signature Algorithm: sha256WithRSAEncryption
81:46:f2:f5:6f:bc:a8:d2:33:27:8b:35:b7:55:22:95:4c:79:
da:4f:34:8e:ad:d2:37:19:f2:d7:e3:41:b4:6d:8f:6e:10:f1:
76:1d:14:da:8c:71:30:26:57:7d:65:1b:4d:9f:82:8c:f8:94:
b6:60:97:22:e0:86:8a:17:3d:14:df:12:87:ac:c9:1d:f9:23:
ef:5f:c6:10:f6:de:cc:6f:b0:0b:61:12:e2:d2:f3:dd:77:fc:
61:87:d1:30:30:5f:88:c9:d8:45:73:45:c3:38:e2:23:b3:14:
35:ca:a6:78:d5:9a:66:fe:b9:7b:1d:fe:21:97:90:ea:b3:76:
2c:c5:3b:0b:c1:e9:4b:63:69:d6:b4:54:20:2f:d5:76:6d:c5:
08:69:35:d7:97:b0:84:90:94:b4:5a:40:c7:c9:04:d3:61:5a:
d1:bf:fb:10:74:3b:90:65:34:b4:93:d8:b0:89:48:fe:19:b2:
03:6a:6a:48:35:5f:d9:8b:b6:a2:71:5d:30:aa:c5:2a:a7:41:
69:04:94:fc:bf:ba:a1:7f:88:5b:34:19:a7:9c:32:b4:2d:c8:
54:f8:50:ec:e1:97:a2:b8:8f:e8:38:4d:22:5c:b3:fe:b6:78:
e3:c6:4f:51:36:df:c8:ad:02:cc:48:9b:6c:b3:94:1a:2b:e1:
9f:b9:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:51 2024 by rpki-client on console-ams.rpki-client.org