Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.cer (raw, json)
Hash identifier: yrRNXNh1leTsue5GZhTUtA3gglVhu6g7l0MQtjC1FZs=
Subject key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FA8F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Jun 2024 14:03:05 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 38606
AS: 132826
AS: 133020 -- 133021
AS: 134974
AS: 136728 -- 136729
IP: 103.19.32.0/22
IP: 110.92.24.0/21
IP: 202.61.64.0/22
IP: 203.55.67.0/24
IP: 203.171.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129679 (0x1fa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 22 14:03:05 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:e6:ee:2e:17:61:0c:be:c3:58:a6:28:2b:
0e:70:f1:3c:06:ff:15:cd:36:2a:e0:f6:39:61:4e:
a6:32:6e:7f:26:a6:66:a2:f4:a2:ee:07:6a:17:d3:
7b:a4:51:64:67:7b:b2:38:05:ce:25:c3:20:16:2d:
14:8b:f2:9e:6f:d3:1a:86:c3:9d:c5:d8:84:8f:52:
7b:e2:6b:a8:7d:1b:f7:a1:a9:95:24:36:76:0e:ee:
86:f7:c6:fa:97:57:62:a1:a1:e0:59:ab:4f:64:21:
b4:9b:5b:ac:4b:ed:e0:cd:04:25:e4:c9:9b:87:c5:
c3:c8:af:bd:0f:d8:9c:d4:03:12:58:45:4b:f6:5d:
90:ed:17:33:21:4f:94:2f:1b:b6:c1:d0:a9:37:c4:
ae:bd:a2:f6:b7:f0:ec:93:7d:d6:63:8a:ed:69:30:
10:23:b7:12:9b:f3:c2:7b:de:f2:83:81:12:16:fb:
a8:51:4b:0e:6a:95:38:d5:09:1f:d1:eb:19:86:63:
be:da:1e:62:29:18:d0:a9:5c:32:4d:b4:49:ea:98:
ef:4e:9e:42:78:2a:1d:67:d1:5d:65:9d:0a:e1:f1:
23:2e:6c:e2:bb:19:da:4e:cf:51:39:c8:3c:3f:de:
f2:80:ef:b4:2c:f7:5c:29:ba:e5:23:f9:66:6e:61:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38606
132826
133020-133021
134974
136728-136729
sbgp-ipAddrBlock: critical
IPv4:
103.19.32.0/22
110.92.24.0/21
202.61.64.0/22
203.55.67.0/24
203.171.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:de:ad:27:14:28:15:0d:81:53:ec:50:2c:98:24:09:20:ea:
96:dd:1a:bf:df:22:d2:c2:31:73:24:62:7b:d3:dc:c3:94:f6:
68:02:bd:75:91:04:55:56:be:db:fb:8a:d7:b4:94:36:06:fa:
96:4a:47:5d:c7:90:22:2d:c4:2f:f4:88:93:0f:1b:cd:4a:89:
77:1a:d1:f6:92:d0:db:82:1d:5c:0a:68:62:1f:a8:ca:e2:1c:
2c:68:53:23:f6:ed:89:ff:35:a8:39:86:42:ef:e8:36:95:67:
1b:92:ec:de:b9:e5:28:60:2e:6c:28:16:fd:f4:86:d6:a1:ae:
04:9b:c0:3c:15:e6:ed:08:ec:e1:9b:87:b8:36:8a:11:fc:93:
ff:1a:80:15:48:ca:76:9d:4d:16:18:19:e5:11:f8:97:eb:aa:
28:e1:a3:b4:06:f8:e1:f0:7c:ee:7b:0d:f9:f3:8d:ba:e9:09:
fa:d1:2b:b8:f3:de:ae:88:40:5a:c4:b9:c1:e3:df:d1:ea:c7:
0f:56:f6:b1:94:d6:9f:4f:7d:40:74:da:b7:80:e9:c7:f5:ed:
a4:2e:f7:50:b7:c5:95:a3:f6:e1:fe:23:fc:a1:e3:b7:d5:27:
b8:15:04:90:69:c8:4c:81:8f:ce:94:17:77:14:98:7a:47:cf:
50:4a:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:04:59 2024 by rpki-client on console-ams.rpki-client.org