Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer (raw, json)
Hash identifier: NP4lfVLO7rI4LnHqV/i8IcIVo1vJfrl7HCdDpZvfRmg=
Subject key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E18D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Feb 2024 21:42:45 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 136452
AS: 151468
IP: 103.112.96.0/22
IP: 103.229.54.0/23
IP: 116.204.232.0/22
IP: 2401:1020::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123277 (0x1e18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 29 21:42:45 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:46:1a:c6:fa:b5:b6:0d:62:40:aa:bf:59:5d:
b7:94:32:59:95:0f:0b:f6:42:be:16:ba:eb:e0:2a:
ba:5e:ea:45:4e:5a:1d:3b:8a:e5:89:3d:d2:6f:73:
d8:32:c8:66:5f:6e:f4:f7:fb:a1:a2:ca:ba:db:de:
ab:0f:e2:a7:06:bb:7f:e3:f8:d1:fe:06:9a:00:05:
d2:fe:54:8a:54:11:ba:3e:a3:ea:2c:15:bf:5e:6c:
a6:3d:67:bc:64:70:08:09:ea:32:38:78:34:33:42:
09:ed:91:a2:ec:f5:4e:79:02:a0:09:e6:3c:7f:69:
f4:07:c5:f8:c0:63:96:64:13:8d:a4:a8:a6:20:2f:
73:97:6a:33:ad:f8:67:59:c5:02:96:17:04:a4:3a:
ea:c8:29:0d:14:fd:7e:a6:7f:d1:3b:14:44:3b:93:
7a:fd:59:49:d7:0e:f0:b0:0b:06:2d:75:cf:4a:26:
9e:bd:09:bf:89:73:6a:6e:33:b3:81:6c:40:13:eb:
f5:44:20:86:eb:a1:47:28:91:15:f9:3e:47:c4:16:
a2:2e:95:16:d8:b3:c1:c2:9f:66:b7:fd:e9:ef:94:
f6:70:3c:4e:11:a9:a7:7c:bc:95:e6:84:d7:0a:b6:
79:ea:22:6a:0b:e9:38:17:0e:59:b7:ca:35:03:a0:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136452
151468
sbgp-ipAddrBlock: critical
IPv4:
103.112.96.0/22
103.229.54.0/23
116.204.232.0/22
IPv6:
2401:1020::/32
Signature Algorithm: sha256WithRSAEncryption
c6:bb:16:7e:4b:c3:0e:72:3c:21:08:93:e2:fc:ef:1d:bf:94:
30:9d:8d:a7:91:6d:92:d0:a3:ac:49:01:aa:f2:28:84:6b:06:
53:32:64:80:58:ba:f3:2f:c7:a3:19:ad:92:80:28:f6:64:18:
04:5d:f1:91:d9:8a:af:e2:70:5b:37:06:71:ac:ad:0e:6a:0c:
0a:03:6c:b3:b5:c0:e3:dd:5a:b6:99:3d:75:3d:28:1e:44:d0:
f2:44:2b:d9:2c:41:67:2f:b1:c0:49:f9:67:14:fa:77:fd:e5:
a5:b5:f6:53:25:73:5f:e9:dc:9b:e7:55:e0:e6:f9:77:a3:aa:
6b:57:4e:67:fb:e8:18:80:6a:76:b7:45:d6:e8:47:51:2b:3b:
12:db:1c:e2:10:10:25:ba:c2:79:50:fd:92:9b:91:86:b9:c1:
03:a5:6d:65:52:17:73:01:2c:6b:bf:da:bd:55:32:a9:24:61:
a1:9b:e8:0f:d2:85:0a:c2:2b:2a:7a:41:90:b3:29:7e:24:17:
48:28:9e:19:04:a4:91:d3:c6:be:62:cb:b9:c3:1b:49:d4:35:
3a:1b:e6:cf:13:52:2b:25:ee:9f:15:9b:db:6b:d0:1a:1c:a4:
8a:0f:de:51:53:29:d0:1b:56:1f:10:73:fd:29:1b:39:18:80:
1b:34:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:28 2024 by rpki-client on console-ams.rpki-client.org