Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.cer (raw, json)
Hash identifier: Q0R26dA+UzvFkQjiHz46tIcUliA2pvm8jEDKgMnVxHo=
Subject key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E244
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Mar 2024 05:14:39 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 134121
AS: 134176
IP: 103.226.124.0/22
IP: 103.242.0.0/22
IP: 150.129.80.0/22
IP: 2400:be80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123460 (0x1e244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 05:14:39 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:20:e0:86:d9:1f:c6:91:63:81:bd:0f:04:
1e:d7:8d:a4:22:b9:67:87:fa:67:1c:57:54:9d:3a:
fb:cc:cb:2a:dc:fb:69:0c:49:ca:c5:81:16:d1:3b:
77:f1:07:4b:71:95:c4:c7:61:32:2c:b3:ca:e2:9f:
a2:29:04:d0:47:aa:d0:a8:42:80:b9:01:a3:1a:f2:
35:ea:ba:1f:b4:79:4f:a0:f0:51:95:1e:97:45:27:
64:38:43:28:d6:d5:5e:3a:6e:d1:cc:a5:32:da:c1:
20:c8:78:19:ea:d5:4e:df:5b:8a:27:a8:f0:8e:4d:
bc:8c:03:78:f8:cd:a1:d3:6b:b0:8f:68:73:c0:40:
18:4f:13:7e:7a:9b:9c:1a:06:42:d3:9e:43:45:b2:
be:3f:e7:87:3e:d0:27:d0:fc:bb:9c:1d:85:1f:b6:
86:11:19:6b:70:48:29:a3:59:db:a0:70:4d:4b:63:
fe:14:5c:8f:59:cb:b6:72:e4:66:a0:82:58:d8:a9:
38:e0:39:9b:ca:29:00:c9:e6:37:6d:94:1c:31:54:
bf:3a:4f:2b:4e:1f:99:a2:de:75:06:15:60:4f:20:
1c:de:f1:a3:87:fa:4b:34:e6:40:23:6d:6f:09:9d:
bd:9a:87:15:f2:2f:1d:e9:12:1d:94:1b:4b:16:cb:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134121
134176
sbgp-ipAddrBlock: critical
IPv4:
103.226.124.0/22
103.242.0.0/22
150.129.80.0/22
IPv6:
2400:be80::/32
Signature Algorithm: sha256WithRSAEncryption
58:ab:8c:d1:80:62:0e:a7:ce:a6:3f:ae:3b:c7:5b:46:fc:51:
c0:2c:62:9e:e9:85:05:97:a5:ba:ec:4e:10:a9:cd:85:64:bc:
87:61:43:38:fb:ba:dd:fc:fa:16:c8:0d:9a:cf:cd:4e:23:94:
30:66:26:01:a3:c7:76:a9:0e:cc:4b:54:80:3b:af:0d:b7:c2:
eb:1c:ea:ea:4d:26:0c:88:79:ce:c4:1a:90:0f:67:8d:f9:40:
50:dd:ad:e2:62:e9:41:fb:bd:12:bf:95:84:65:10:76:db:69:
58:6b:20:8a:e2:c9:8a:77:13:f7:bb:83:b2:bb:d9:cd:d7:da:
18:c8:6a:a4:06:20:29:3b:3f:c1:57:e4:90:da:05:45:0f:d7:
55:65:29:12:af:fb:ee:14:c2:92:fa:de:b0:8a:f5:79:e5:a8:
9b:44:0c:80:39:70:7b:fe:00:73:26:e1:ea:a3:22:3d:e1:26:
db:f6:00:c1:49:46:8b:bb:e8:5c:d1:80:20:86:4c:9a:39:9f:
3d:e5:b9:eb:cf:a8:eb:93:df:7d:bc:b2:5f:c8:ae:28:e7:0c:
e5:34:6b:77:fa:95:74:e9:84:ab:4f:e3:61:ad:77:1c:4d:02:
61:fe:d5:8a:64:13:3b:ce:9b:e1:07:7c:18:de:c9:41:a8:6e:
0c:d3:b2:85
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAeJEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwMjA1MTQzOVoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEz
ODVFOUYyQUFCQkExMzRFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDOiDghtkfxpFjgb0PBB7XjaQiuWeH+mccV1SdOvvMyyrc+2kMScrFgRbRO3fx
B0txlcTHYTIss8rin6IpBNBHqtCoQoC5AaMa8jXquh+0eU+g8FGVHpdFJ2Q4QyjW
1V46btHMpTLawSDIeBnq1U7fW4onqPCOTbyMA3j4zaHTa7CPaHPAQBhPE356m5wa
BkLTnkNFsr4/54c+0CfQ/LucHYUftoYRGWtwSCmjWdugcE1LY/4UXI9Zy7Zy5Gag
gljYqTjgOZvKKQDJ5jdtlBwxVL86TytOH5mi3nUGFWBPIBze8aOH+ks05kAjbW8J
nb2ahxXyLx3pEh2UG0sWyyj/AgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUMFikabZ9
AwcsLYo4Xp8qq7oTTiswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY5NjY1LzZEMEQxMkI4NEJGNTExRUJCRDgzQjg3QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJa
OUF3Y3NMWW80WHA4cXE3b1RUaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgvpAgMCDCAwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJn4nwD
BAJn8gADBAKWgVAwDQQCAAIwBwMFACQAvoAwDQYJKoZIhvcNAQELBQADggEBAFir
jNGAYg6nzqY/rjvHW0b8UcAsYp7phQWXpbrsThCpzYVkvIdhQzj7ut38+hbIDZrP
zU4jlDBmJgGjx3apDsxLVIA7rw23wusc6upNJgyIec7EGpAPZ435QFDdreJi6UH7
vRK/lYRlEHbbaVhrIIriyYp3E/e7g7K72c3X2hjIaqQGICk7P8FX5JDaBUUP11Vl
KRKv++4UwpL63rCK9XnlqJtEDIA5cHv+AHMm4eqjIj3hJtv2AMFJRou76FzRgCCG
TJo5nz3luevPqOuT3328sl/IrijnDOU0a3f6lXTphKtP42GtdxxNAmH+1YpkEzvO
m+EHfBjeyUGobgzTsoU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:20 2024 by rpki-client on console-fra.rpki-client.org