Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer (raw, json)
Hash identifier: g2CWSDfwIuYx5VD5UK17emcfdaTEG2A+h3puOab+hN8=
Subject key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0213EB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Oct 2024 16:30:41 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141187
IP: 103.155.244.0/23
IP: 2406:7a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136171 (0x213eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 14 16:30:41 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:1e:e6:7a:15:d2:9d:a9:0b:50:8a:30:48:
bd:78:8c:a2:38:57:dd:19:03:f2:04:bc:e2:15:e8:
02:41:03:78:af:b9:c7:bd:78:f1:36:cf:76:1c:d6:
8d:2e:de:30:e6:51:93:a1:28:8e:37:25:3f:84:36:
c3:69:d8:3f:53:2e:99:56:ab:69:dd:fe:5b:db:7e:
a9:78:3c:0f:c4:56:58:b0:94:1d:d2:cf:24:d7:78:
f4:7f:7f:d6:ad:85:49:2c:e1:95:84:14:b6:58:ba:
fe:12:8b:72:2b:9a:8e:bb:de:28:66:78:a1:a3:6d:
a4:e5:16:b1:75:66:96:e7:4b:11:13:9c:d5:ad:c9:
f0:bc:32:c5:eb:ba:7a:f3:1f:1f:bb:35:fa:0b:fd:
9b:81:58:8b:16:22:dc:48:76:18:6f:9a:08:62:a6:
a9:99:b1:72:3d:f0:08:ff:44:76:20:ff:6a:05:f4:
cf:97:8d:9c:32:40:e7:44:10:bf:c2:43:9b:c7:0c:
46:07:9d:93:0a:22:54:68:a9:8f:a8:70:5b:26:ce:
05:41:8d:83:ee:99:34:e6:99:2b:e0:42:d5:54:c7:
6c:ca:2c:af:e3:32:47:85:19:8a:4e:19:ba:23:2c:
c9:db:c9:bf:56:9a:91:86:77:40:36:56:bb:8f:37:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141187
sbgp-ipAddrBlock: critical
IPv4:
103.155.244.0/23
IPv6:
2406:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
83:ab:72:8a:37:91:4d:85:44:94:7c:9d:35:5b:7a:fc:cc:b1:
e8:74:16:bc:f7:28:2e:7d:d7:28:82:b2:78:8b:c2:f7:eb:6f:
02:6c:19:df:13:6a:1d:ff:75:ae:92:d0:55:be:77:da:f8:24:
8a:4a:0e:e5:3b:8c:52:c5:0e:9e:d0:8f:5f:31:32:d5:3b:e6:
ad:38:fe:a0:f8:06:d8:25:2d:53:74:9a:07:3e:f7:7d:75:0a:
21:5f:53:1b:fa:12:da:9b:b1:0d:ac:a8:9b:64:87:30:8a:20:
09:11:59:28:e2:0e:3e:3b:69:b3:f7:f3:c5:80:f9:19:9a:32:
15:9c:7e:49:ac:75:ee:a7:70:1e:2c:7d:fa:ef:29:b4:6f:d1:
64:e0:5b:b8:f9:7a:72:c4:81:53:fc:44:a1:76:c0:b9:43:21:
3d:cd:ef:84:59:87:4a:15:a8:6a:0e:b5:ab:3a:70:21:2d:e0:
fd:8b:fe:be:27:5b:3e:10:54:98:8e:41:44:34:d3:f1:e3:44:
41:d7:68:a0:e4:6e:e0:cf:2f:03:77:b6:8d:e0:f4:9f:46:65:
76:fa:ab:45:24:61:8a:99:46:e8:39:73:2f:6e:ef:1a:47:dc:
f1:17:d6:f3:5b:27:04:c2:05:8d:de:12:1e:33:ec:c6:7b:23:
4f:46:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:39 2024 by rpki-client on console-fra.rpki-client.org