Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
File: NDyCcTdhxY6CRQ2UqleWffm0bxU.cer (raw, json)
Hash identifier: dO19YEV3IyqRT0M1ERpNrGwYqSauvEcAG1pNYG+mzws=
Subject key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AEC0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Jul 2023 16:49:17 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 136618
IP: 103.94.134.0/23
IP: 2401:e4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110272 (0x1aec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 6 16:49:17 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:36:b8:9f:f8:91:f3:eb:57:2a:8e:db:3d:
b1:5b:cf:92:ad:7e:52:63:e4:cb:ae:70:f4:6c:a6:
14:a5:05:fc:1a:68:5f:ee:93:47:a7:27:aa:f2:ee:
47:6e:54:2d:1f:33:49:7b:b1:f6:07:26:09:3b:65:
f6:d0:cf:a1:b1:37:d3:66:dc:26:84:2e:ad:d0:16:
ab:9f:6f:4e:37:e9:8f:da:9c:d7:cc:88:cb:cc:c9:
36:fd:0b:20:79:77:0e:ca:22:78:f1:2f:2d:a6:12:
6c:32:64:66:4f:22:fc:aa:3e:05:0e:d0:a6:07:c9:
4d:c2:f2:6d:cc:28:0c:2b:e0:03:78:97:15:54:83:
50:79:36:e5:fe:a2:6e:62:99:96:00:10:90:fd:eb:
a1:22:3f:40:66:ff:19:66:7f:28:29:21:56:21:2f:
0a:fe:fa:62:0b:28:92:16:eb:87:75:9c:a2:9b:a0:
83:77:e4:56:d3:19:ba:71:38:6a:34:d3:f7:05:a4:
b6:12:c0:b2:41:86:78:b9:10:92:4d:f5:43:93:4b:
b7:d5:a8:f6:06:5d:8e:15:d0:0a:14:7c:e6:dd:34:
7a:1b:ee:89:b2:84:89:50:94:9f:56:c5:05:e4:03:
9f:e3:41:55:62:92:a5:9b:58:1d:54:50:67:40:68:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136618
sbgp-ipAddrBlock: critical
IPv4:
103.94.134.0/23
IPv6:
2401:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:32:be:0d:47:c8:2c:98:bf:d4:f0:d0:21:d5:33:48:e5:92:
74:d8:aa:58:6a:1a:11:ad:ae:de:22:89:60:ef:24:2b:46:9f:
9f:5d:79:23:15:a6:24:4a:59:d0:d9:88:c6:e4:ba:0b:7e:b5:
3e:06:20:6d:4f:f8:99:38:60:f7:bc:e8:f4:7e:d8:d3:e1:08:
48:a4:f9:5e:6e:00:c8:e0:f9:72:b1:5c:58:c4:2a:1b:46:2e:
93:73:22:19:e0:7d:ab:bd:db:58:3f:17:88:bc:db:1d:78:1e:
44:c2:05:34:28:ad:fa:de:30:39:de:8c:c7:c2:9e:fe:12:df:
0d:de:54:cc:29:d2:fe:16:f9:5c:1f:49:e8:7a:04:bc:66:df:
4d:26:4b:c3:d9:d9:b7:8b:cd:43:6d:ca:e6:b6:34:7c:27:db:
f7:ad:87:40:a7:9b:4b:3a:d6:99:94:f9:15:44:49:3f:8c:82:
0f:51:f4:0a:4e:a5:98:18:7a:ae:57:40:c1:a0:20:ca:d3:87:
0b:c0:8d:1a:00:29:c1:cf:a4:c5:a0:f8:0b:f5:17:b7:f1:15:
1c:9a:37:b2:43:3e:ed:61:dd:6b:e4:27:f6:1a:5d:0c:65:ad:
e9:2c:ba:5c:75:b3:50:b4:c3:4c:b1:67:9c:d4:96:8c:90:76:
e2:f7:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:16:34 2024 by rpki-client on console-fra.rpki-client.org