Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
File: QQmhbhhypDGvWRhmVbtg1TN8pIU.cer (raw, json)
Hash identifier: bdfVzoCa/KLALfOR8xmaB4lhFkxrueMyFrCOPTvzW0I=
Subject key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021585
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Oct 2024 19:52:11 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.76.144.0/22
IP: 2407:6d80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136581 (0x21585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 19:52:11 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:21:a3:ee:22:3b:34:89:c0:6c:66:db:5a:
94:cb:79:ea:1c:2d:82:44:0d:63:ea:dc:64:22:c0:
36:d2:ad:c3:21:62:39:33:0f:d3:3b:e5:7a:7f:9c:
11:b9:1b:55:8f:9d:34:dd:96:b0:a5:c2:29:05:5d:
1e:e8:4f:30:fc:7d:d4:66:27:db:0c:c9:1d:3c:c5:
8d:30:65:a1:6d:48:fa:ca:f4:b9:9f:bf:6f:0f:f3:
2b:df:75:08:36:a7:e3:67:de:e2:f6:de:2b:3d:94:
ad:a7:62:37:aa:36:f9:df:26:4f:a5:89:06:82:e6:
b7:6d:c3:f5:9d:ff:bf:6a:e4:a4:9f:26:f4:07:6b:
84:2f:54:e5:b5:04:93:b6:8f:d1:1e:4d:43:83:aa:
e9:95:dc:a3:b4:40:5a:e9:ca:57:a8:5b:95:3c:d6:
0a:53:fd:73:f8:ac:52:bf:ad:35:96:23:ad:9d:d7:
88:bc:15:75:8d:37:0d:ff:5a:03:7e:36:36:c7:01:
77:81:41:90:55:b6:11:69:68:78:7a:c8:fc:b0:e2:
42:29:75:c3:d2:28:8e:30:74:c4:73:ba:eb:70:56:
0d:e0:a9:a0:68:ea:6c:be:a7:bf:80:c7:29:3a:38:
3d:bd:a0:ba:08:9a:35:0a:99:f9:14:cc:2f:13:a2:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.144.0/22
IPv6:
2407:6d80::/32
Signature Algorithm: sha256WithRSAEncryption
86:3d:9f:61:97:ce:15:05:97:fb:1a:4d:79:b0:54:da:61:ca:
23:67:ee:9d:7e:62:6e:b2:4c:03:01:dc:f3:51:33:31:8a:ee:
8d:e4:24:43:31:13:f6:be:0a:39:1c:4c:d1:f5:f2:27:4c:e5:
e8:84:c3:12:c0:7b:b6:3f:76:51:52:e3:2e:39:37:6c:4a:be:
c6:03:08:e3:cb:0a:76:3c:07:14:db:e9:8e:e1:e7:2a:80:a4:
06:6a:14:9e:c7:26:b4:54:38:28:08:e4:65:5c:02:bf:60:38:
60:85:03:fa:49:73:e3:6f:54:3a:58:0d:a8:5d:ac:38:a6:34:
b2:2a:db:4c:0f:00:6a:e9:02:68:ac:2d:48:8e:79:99:30:2f:
d8:4d:fb:ff:d1:f2:9f:f5:fe:fd:4f:79:9a:15:2e:41:6f:00:
f0:af:cf:15:a7:58:23:41:d8:e1:e1:7c:84:01:6c:5d:dc:25:
1b:19:95:3e:eb:b8:e7:46:dc:e4:77:e0:e9:d8:ac:87:66:f0:
8c:b1:6a:ea:31:35:3c:3a:62:26:54:e5:73:a6:75:0f:59:96:
ce:33:2c:d5:18:b8:a2:7d:a7:87:e2:9c:b5:46:86:90:6a:de:
cd:dc:db:93:8f:3f:c0:ba:28:39:fb:6a:a0:9d:60:8b:44:4f:
c1:f8:55:dc
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAhWFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAyMzE5NTIxMVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2
NjU1QkI2MEQ1MzM3Q0E0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDo7CGj7iI7NInAbGbbWpTLeeocLYJEDWPq3GQiwDbSrcMhYjkzD9M75Xp/nBG5
G1WPnTTdlrClwikFXR7oTzD8fdRmJ9sMyR08xY0wZaFtSPrK9Lmfv28P8yvfdQg2
p+Nn3uL23is9lK2nYjeqNvnfJk+liQaC5rdtw/Wd/79q5KSfJvQHa4QvVOW1BJO2
j9EeTUODqumV3KO0QFrpyleoW5U81gpT/XP4rFK/rTWWI62d14i8FXWNNw3/WgN+
NjbHAXeBQZBVthFpaHh6yPyw4kIpdcPSKI4wdMRzuutwVg3gqaBo6my+p7+Axyk6
OD29oLoImjUKmfkUzC8TooFZAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUQQmhbhhy
pDGvWRhmVbtg1TN8pIUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFFMzA5L0JEQjQyRjM2NzI0NjExRUI4QUVEREM1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmho
eXBER3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnTJAwDQQCAAIwBwMFACQHbYAwDQYJKoZIhvcNAQELBQADggEB
AIY9n2GXzhUFl/saTXmwVNphyiNn7p1+Ym6yTAMB3PNRMzGK7o3kJEMxE/a+Cjkc
TNH18idM5eiEwxLAe7Y/dlFS4y45N2xKvsYDCOPLCnY8BxTb6Y7h5yqApAZqFJ7H
JrRUOCgI5GVcAr9gOGCFA/pJc+NvVDpYDahdrDimNLIq20wPAGrpAmisLUiOeZkw
L9hN+//R8p/1/v1PeZoVLkFvAPCvzxWnWCNB2OHhfIQBbF3cJRsZlT7ruOdG3OR3
4OnYrIdm8IyxauoxNTw6YiZU5XOmdQ9Zls4zLNUYuKJ9p4finLVGhpBq3s3c25OP
P8C6KDn7aqCdYItET8H4Vdw=
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:33 2024 by rpki-client on console-fra.rpki-client.org