Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
File: NNe9YUOWrkRRcOBY4K7c661JQF8.cer (raw, json)
Hash identifier: mtOvZu2892AeEKYcG2VafwZPHA4dGQn2eWQ7SEMaKro=
Subject key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Sep 2024 03:40:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 135279
IP: 103.212.36.0/22
IP: 139.5.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134626 (0x20de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 17 03:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:1c:29:fd:01:94:0a:32:a5:16:c0:fa:ac:
72:87:bf:54:59:88:30:2d:75:09:08:3e:c4:25:84:
01:74:53:89:c6:92:77:98:06:9d:e7:a8:78:c2:bb:
06:7e:2b:d6:49:b4:31:3a:be:b9:d4:b6:25:ec:bf:
68:f9:1b:82:18:8c:8d:3f:fc:0e:2b:4e:36:e4:bf:
5b:83:0b:d6:25:e8:65:2b:d7:58:fa:7e:64:b9:54:
62:9a:97:06:d1:ac:98:59:c4:a2:9b:51:a1:aa:22:
1e:90:57:58:d8:1c:83:12:28:b4:d0:b4:b4:d5:e9:
ee:d7:1f:cc:4b:86:c9:8a:e4:60:98:42:ff:0c:a4:
c8:5e:fe:ab:e1:c0:ad:bb:f8:c5:9e:4d:9e:cc:e1:
10:3e:35:87:5e:48:df:0b:92:e2:19:28:57:64:b3:
68:21:ec:8d:4a:74:0b:08:36:6e:22:72:3d:ba:9d:
34:95:8c:b1:92:8b:b5:d6:6d:c0:cb:8b:42:28:f8:
11:99:af:11:c6:9a:2e:a2:d7:a2:3e:c9:62:67:74:
c6:ec:93:47:56:26:df:c4:54:27:c1:11:06:72:4e:
ad:0b:43:7e:62:c5:24:da:69:8b:7b:56:4e:c4:fd:
53:15:b4:84:99:a3:7f:98:4b:bb:dd:fb:36:2a:e6:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135279
sbgp-ipAddrBlock: critical
IPv4:
103.212.36.0/22
139.5.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:92:db:53:d6:84:b9:b3:d2:55:a1:de:0d:85:08:80:16:0d:
5a:b5:66:46:a1:29:16:3d:88:15:ea:2e:8f:f2:01:ac:63:3c:
fa:5d:fe:f3:e2:e8:3f:04:08:4c:84:26:cf:fd:68:c0:37:b2:
12:d5:58:86:9c:8a:cd:16:c7:99:1d:a0:56:fa:f8:0a:23:61:
55:96:72:0f:c5:01:d2:f1:ab:5f:5d:17:6f:0e:e9:ed:48:c6:
4b:bf:ea:30:6b:e7:34:36:bc:ca:a1:be:9e:c6:bc:a8:e0:cf:
43:cc:e0:d1:47:2f:0d:74:9b:db:38:fe:80:67:1e:3f:4e:a3:
6c:50:1e:33:4a:3e:4a:c9:fb:08:b8:c0:3b:3f:d0:98:ad:85:
f4:13:4d:33:5a:52:47:13:c3:b6:96:72:ed:bb:0a:3c:cc:bf:
ea:34:0d:e9:92:4a:a4:d1:7c:55:64:a3:95:e2:ef:a7:cd:fa:
52:19:47:e7:25:a7:dd:7a:8a:73:9e:77:15:1b:f5:e1:d0:bb:
e5:3a:cb:e1:87:59:ab:8f:b7:1a:ee:14:7a:a0:35:5b:37:32:
ce:3e:a5:8e:db:ba:e9:58:f1:9b:0e:ce:32:58:29:9d:39:5d:
d1:3a:af:44:b4:74:25:9f:35:9d:f2:ba:8d:de:e0:67:22:91:
ea:67:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:38 2024 by rpki-client on console-ams.rpki-client.org