Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
File: LIi8YKOEeXk7VUcMN37SPqAtByI.cer (raw, json)
Hash identifier: 10Va9t78xk0RfpRyH3mgVjUaOt8zQpNcxtYm0n8F0Lc=
Subject key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B054
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Jul 2023 17:21:07 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 103.96.0.0/22
IP: 113.212.88.0/22
IP: 2001:df1:c900::/48
IP: 2401:7340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Apr 2024 18:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110676 (0x1b054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 17:21:07 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:6e:a2:18:d5:90:9f:39:f6:04:84:95:a6:
04:da:e9:97:45:aa:72:73:00:e9:17:b7:a1:1d:4d:
49:93:94:3d:5b:c7:44:03:14:50:51:ad:7a:d8:12:
12:15:1e:de:64:9f:a8:4e:fd:11:e8:ed:17:76:1e:
9e:9f:b9:e5:e8:18:90:89:e9:71:43:ad:18:51:59:
93:a1:0e:28:f0:8c:66:d1:10:7d:6a:2c:d8:7e:6d:
b3:f2:e2:68:8c:1f:6a:a7:2c:a2:83:73:2d:9e:e8:
90:9b:f4:70:47:52:b2:58:bd:6d:ac:a3:da:23:d5:
f9:e5:d0:0f:cb:8b:2b:e2:5c:c7:bb:30:2e:18:0f:
21:7d:94:0d:6c:f9:df:80:85:41:95:93:c8:fb:fb:
6a:3e:07:7e:77:90:54:82:b5:45:e1:9a:56:2a:34:
ef:c5:5d:16:1d:e6:96:e2:76:5b:64:0b:75:82:43:
5d:06:98:51:95:21:39:41:e5:2d:76:b6:47:c2:c7:
2c:56:63:7d:f4:f2:4c:4a:b1:83:92:eb:0c:e8:84:
a6:c9:d1:fc:09:46:7a:21:f2:f1:66:c0:94:0e:89:
53:4b:b5:5f:38:59:cf:7a:ff:ed:40:63:86:30:d2:
1e:31:4c:ae:d9:29:6d:d5:66:eb:c5:72:f8:4b:4e:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.0.0/22
113.212.88.0/22
IPv6:
2001:df1:c900::/48
2401:7340::/32
Signature Algorithm: sha256WithRSAEncryption
64:f5:6d:f7:63:ea:ef:19:f8:54:00:08:40:57:a7:e2:41:5f:
da:77:30:62:83:42:0f:5a:fb:38:07:9b:2d:3c:6e:a9:db:77:
ed:9b:91:98:b1:96:68:e1:b6:52:79:c7:4d:0f:57:eb:0d:fb:
95:d0:7e:7f:ee:32:5a:7e:ce:2c:6f:c5:47:c7:a8:6d:b7:b4:
a7:88:ed:c5:85:db:3a:35:71:63:a2:01:e3:cf:e8:5d:72:e5:
b9:9d:0e:ff:e8:c5:93:dd:06:c2:ad:5e:f2:0b:55:c2:e6:cf:
53:d6:cd:6c:78:cc:bc:5c:23:b8:17:68:e4:18:9f:48:e2:7c:
be:63:0a:ff:63:68:ba:ea:ea:45:fb:6b:de:e6:51:f4:b0:9a:
17:5f:7d:ab:5b:46:ef:1e:34:4b:f1:25:64:52:0c:e6:78:ff:
86:99:65:fb:4b:21:a6:e3:2a:87:dd:81:fe:7d:ab:a1:2f:6a:
92:3b:6f:a6:14:e6:b0:cd:65:cb:46:9a:58:bc:84:e9:75:b6:
23:c8:62:04:93:9c:2f:81:4b:64:04:4e:86:38:5f:5c:54:04:
12:ff:c8:ac:84:98:b6:6a:ee:c0:90:49:c3:07:0e:9d:e3:09:
2a:12:ed:76:e3:0d:7c:35:e9:7c:a7:24:25:bc:14:51:d8:42:
82:3f:5e:72
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIDAbBUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcxNjE3MjEwN1oXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDUxMTQxMTAvBgNVBAUTKDJDODhCQzYwQTM4NDc5NzkzQjU1NDcw
QzM3N0VEMjNFQTAyRDA3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3I26iGNWQnzn2BISVpgTa6ZdFqnJzAOkXt6EdTUmTlD1bx0QDFFBRrXrYEhIV
Ht5kn6hO/RHo7Rd2Hp6fueXoGJCJ6XFDrRhRWZOhDijwjGbREH1qLNh+bbPy4miM
H2qnLKKDcy2e6JCb9HBHUrJYvW2so9oj1fnl0A/LiyviXMe7MC4YDyF9lA1s+d+A
hUGVk8j7+2o+B353kFSCtUXhmlYqNO/FXRYd5pbidltkC3WCQ10GmFGVITlB5S12
tkfCxyxWY3308kxKsYOS6wzohKbJ0fwJRnoh8vFmwJQOiVNLtV84Wc96/+1AY4Yw
0h4xTK7ZKW3VZuvFcvhLTnN5AgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQULIi8YKOE
eXk7VUcMN37SPqAtByIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ1MTE0LzM0RTE5RTg4RTVBMjExRUQ4MDhDRjM3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtP
RWVYazdWVWNNTjM3U1BxQXRCeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8ELjAs
MBIEAgABMAwDBAJnYAADBAJx1FgwFgQCAAIwEAMHACABDfHJAAMFACQBc0AwDQYJ
KoZIhvcNAQELBQADggEBAGT1bfdj6u8Z+FQACEBXp+JBX9p3MGKDQg9a+zgHmy08
bqnbd+2bkZixlmjhtlJ5x00PV+sN+5XQfn/uMlp+zixvxUfHqG23tKeI7cWF2zo1
cWOiAePP6F1y5bmdDv/oxZPdBsKtXvILVcLmz1PWzWx4zLxcI7gXaOQYn0jifL5j
Cv9jaLrq6kX7a97mUfSwmhdffatbRu8eNEvxJWRSDOZ4/4aZZftLIabjKofdgf59
q6EvapI7b6YU5rDNZctGmli8hOl1tiPIYgSTnC+BS2QEToY4X1xUBBL/yKyEmLZq
7sCQScMHDp3jCSoS7XbjDXw16XynJCW8FFHYQoI/XnI=
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:44:46 2024 by rpki-client on console-fra.rpki-client.org