Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.cer (raw, json)
Hash identifier: oquzhow6WYLCPTq6QkjvuO0VX0cOplVbjBQra//X5NQ=
Subject key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DF9A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Feb 2024 15:52:54 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 149474
IP: 103.180.112.0/23
IP: 2400:52a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122778 (0x1df9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 19 15:52:54 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:cd:d7:b1:d9:5c:77:d6:f6:0e:37:33:b0:
99:21:94:23:cd:45:53:7c:d8:85:bf:24:7b:f5:51:
c7:de:3c:60:11:bf:33:ac:4f:d7:df:ee:94:8c:3b:
a3:c7:29:85:5c:2a:49:04:ca:34:e9:02:d7:37:8e:
65:aa:93:20:4b:ee:3e:b7:5f:31:e1:00:11:1a:74:
aa:f6:fd:08:fc:79:c1:d7:0e:4e:ba:7c:ff:a3:d6:
90:67:d6:87:36:c7:fa:ee:08:92:ef:e1:48:f2:22:
7d:2e:f3:f7:ec:c7:c0:37:15:1c:1a:5e:8b:e6:0a:
0b:4e:90:3f:76:ce:57:63:a2:c4:03:a3:61:bf:26:
52:25:10:91:a0:d2:0f:ef:99:e4:ba:89:db:31:9e:
85:fd:a5:2d:4f:56:60:b7:1f:8e:97:62:69:10:55:
8e:d0:32:9c:98:63:46:05:31:8c:b7:da:d0:1b:86:
38:dd:77:1e:7b:51:00:0c:54:2f:57:ff:da:e4:b3:
be:66:0d:47:9f:2c:83:7b:f4:0b:ba:f1:43:87:f2:
f6:77:2f:08:4e:1e:63:f5:6c:14:9c:c5:4b:16:75:
49:3d:eb:0d:72:e0:bd:2b:9b:53:f0:e1:63:40:7a:
db:46:c5:5b:ba:43:2a:4f:13:74:9a:dc:ab:55:37:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149474
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
IPv6:
2400:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:fd:9a:da:83:1e:da:1d:82:ec:a7:4a:0c:34:b3:f2:cf:f8:
53:d4:a1:96:f4:8a:aa:55:18:ce:a8:7a:76:dd:23:50:63:de:
46:cd:08:0f:20:c8:d8:ad:d5:bc:a8:62:5b:c4:bc:aa:71:81:
86:4c:d1:33:4a:df:fe:a5:41:e1:93:08:90:f4:69:26:3b:c6:
fe:a4:e4:9a:7e:ab:87:b6:3e:af:4c:f6:6b:cd:52:ea:90:55:
0f:33:1d:56:a4:6f:cb:12:7c:e1:f0:3e:46:39:be:89:41:b0:
b2:dc:b7:d6:8b:de:90:35:ca:eb:b0:0a:4e:e8:b2:82:cc:d9:
7c:3a:f5:1e:8c:60:76:4e:e9:6d:e1:9f:bc:7a:95:4b:79:17:
b0:2d:45:e1:30:3d:8b:19:52:6e:5c:da:ae:bc:d2:2c:bd:74:
69:ba:17:61:97:72:27:db:a6:04:22:77:60:f2:8b:ba:de:b6:
14:3c:37:c4:05:4f:41:1c:17:f0:d3:07:12:ed:e2:ab:9a:5e:
6c:8f:79:6d:c4:92:83:ea:ea:27:e3:61:3a:e5:33:b1:1c:2e:
ff:49:ef:99:3f:4a:f8:f9:3b:d2:09:6a:28:aa:ac:14:c8:76:
9d:7b:ff:ac:c4:c2:6d:53:86:e5:68:9c:7d:3a:f9:18:58:74:
3e:e0:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:20 2024 by rpki-client on console-fra.rpki-client.org