Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
File: QQmhbhhypDGvWRhmVbtg1TN8pIU.cer (raw, json)
Hash identifier: tFU2gWCFyhE6ujC5KOuZFnpZ/Vf+viV3QjCqmP2U4+w=
Subject key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C457
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Oct 2023 18:32:01 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.76.144.0/22
IP: 2407:6d80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115799 (0x1c457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 18:32:01 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:21:a3:ee:22:3b:34:89:c0:6c:66:db:5a:
94:cb:79:ea:1c:2d:82:44:0d:63:ea:dc:64:22:c0:
36:d2:ad:c3:21:62:39:33:0f:d3:3b:e5:7a:7f:9c:
11:b9:1b:55:8f:9d:34:dd:96:b0:a5:c2:29:05:5d:
1e:e8:4f:30:fc:7d:d4:66:27:db:0c:c9:1d:3c:c5:
8d:30:65:a1:6d:48:fa:ca:f4:b9:9f:bf:6f:0f:f3:
2b:df:75:08:36:a7:e3:67:de:e2:f6:de:2b:3d:94:
ad:a7:62:37:aa:36:f9:df:26:4f:a5:89:06:82:e6:
b7:6d:c3:f5:9d:ff:bf:6a:e4:a4:9f:26:f4:07:6b:
84:2f:54:e5:b5:04:93:b6:8f:d1:1e:4d:43:83:aa:
e9:95:dc:a3:b4:40:5a:e9:ca:57:a8:5b:95:3c:d6:
0a:53:fd:73:f8:ac:52:bf:ad:35:96:23:ad:9d:d7:
88:bc:15:75:8d:37:0d:ff:5a:03:7e:36:36:c7:01:
77:81:41:90:55:b6:11:69:68:78:7a:c8:fc:b0:e2:
42:29:75:c3:d2:28:8e:30:74:c4:73:ba:eb:70:56:
0d:e0:a9:a0:68:ea:6c:be:a7:bf:80:c7:29:3a:38:
3d:bd:a0:ba:08:9a:35:0a:99:f9:14:cc:2f:13:a2:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.144.0/22
IPv6:
2407:6d80::/32
Signature Algorithm: sha256WithRSAEncryption
2d:db:04:f7:0b:ec:8f:5f:0c:36:ff:9d:5f:ba:bb:45:1d:8e:
2f:4e:1c:9e:da:5d:d1:2d:37:8f:c5:b6:8a:2e:e7:c4:b1:b6:
d5:1c:24:03:bf:16:54:c3:24:cf:4a:53:d7:a6:3e:9c:29:05:
77:ce:c6:e8:10:ea:f7:55:70:02:2f:01:72:c4:bd:0e:f6:b7:
64:32:72:66:e3:a8:63:7a:ef:1d:e2:94:7a:08:32:2b:dd:fb:
47:ba:dc:25:eb:44:50:4a:8a:a9:c2:57:2c:27:a9:ce:d7:1c:
1f:7b:f7:c0:c5:69:91:a5:20:40:57:8c:5d:07:49:68:84:52:
41:ba:42:22:40:2b:66:41:fe:b7:74:51:b3:a4:c4:7e:3a:7b:
83:06:1b:c7:12:d7:bc:37:16:ce:80:86:a5:d6:8f:75:58:a2:
81:18:eb:30:47:37:63:9a:00:d2:b2:bf:42:e2:4d:1b:c2:e8:
d8:a3:86:27:b5:9d:2b:db:01:40:e5:81:50:76:98:21:cf:89:
35:d8:42:e8:4f:75:05:a0:0c:f3:21:db:06:6d:4d:21:b9:2f:
c7:68:e6:f1:6b:11:8e:e3:85:b3:3c:1a:03:32:88:d4:ca:8e:
e7:59:1c:e3:97:e8:0e:e3:54:d7:04:69:25:c3:8e:f6:4b:4d:
3b:a1:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:18:34 2024 by rpki-client on console-ams.rpki-client.org