Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer (raw, json)
Hash identifier: DgUwL1J/JPeWAJuJbnYN3ABCICiUXKpKS2slQIoi1lo=
Subject key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C3E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Oct 2023 07:05:21 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151813
IP: 103.131.134.0/23
IP: 2001:df2:f440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115688 (0x1c3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 13 07:05:21 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:98:2d:ab:5b:9e:23:99:c3:de:bf:ab:43:
6c:58:c0:81:f7:b2:b8:df:e7:85:02:af:cf:9c:a0:
94:7d:dd:89:0f:40:e7:47:9e:fc:6f:98:b1:86:68:
d0:7d:3f:af:69:b4:d7:b4:9f:26:cc:ac:92:1d:fb:
42:66:52:0b:d4:51:5d:e1:cd:ea:25:d5:bf:80:2a:
c1:37:4c:7e:23:6c:fc:a9:ad:b6:6a:ab:ba:1f:5e:
c8:51:9d:77:2b:da:17:b2:3d:7c:3c:fe:6d:ab:cb:
a3:71:84:bc:60:3e:40:3a:54:dd:cf:f0:e0:57:79:
33:64:f7:ed:a3:14:eb:ca:62:32:97:48:18:2b:44:
99:cd:78:b5:d2:f3:1b:f5:34:b6:d7:e8:d2:19:62:
9f:2d:a6:45:27:04:cc:18:b9:06:25:1e:c8:3b:19:
bc:e3:5b:7f:32:63:1c:3a:b4:e5:ea:d6:52:73:b9:
14:d3:be:8a:4f:d0:42:88:f7:ca:65:e5:da:3f:46:
f0:b3:72:05:5a:de:4e:60:cc:cb:70:e9:1d:d1:23:
fe:04:67:72:44:00:f7:5d:f1:3e:eb:68:88:55:1e:
76:ec:55:fa:96:4a:af:86:18:f9:50:24:b1:37:60:
2a:d1:f4:a5:e4:8d:ec:70:ff:51:1a:db:27:5b:81:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151813
sbgp-ipAddrBlock: critical
IPv4:
103.131.134.0/23
IPv6:
2001:df2:f440::/48
Signature Algorithm: sha256WithRSAEncryption
cf:bc:13:fb:ad:af:f7:a3:46:0b:cd:67:e3:9c:08:55:80:80:
c4:20:40:a9:e9:7a:26:d0:3c:6a:82:5a:de:42:ed:cf:4d:e7:
4b:4e:c9:28:c9:ef:88:ba:cc:1f:0d:20:1a:da:73:ee:bc:e3:
bf:9c:fa:62:54:83:fa:a5:f6:71:49:bc:fe:61:64:ef:8e:7f:
35:61:a7:69:9d:aa:ad:3b:4e:e9:84:82:2b:ba:e6:28:5c:c2:
a5:81:98:c3:99:eb:7b:93:31:88:1b:75:2e:05:87:1d:eb:24:
24:73:19:f5:26:17:f1:bf:a5:ae:a9:56:23:4a:2f:09:d0:10:
7d:92:93:87:78:37:66:8e:41:ef:ad:5b:9f:24:f4:fd:98:74:
3c:a9:48:e9:19:83:b5:b0:1e:6d:1e:b3:73:37:94:e4:f7:e9:
b8:df:a6:4f:27:3b:3b:ae:5d:d9:eb:e9:3f:01:dc:6a:76:82:
ac:8c:c5:ca:e2:50:ce:96:0b:01:8f:65:47:1d:a3:f2:27:00:
9e:a8:34:19:55:9e:22:1b:33:38:42:66:b4:c7:7e:13:0a:49:
07:02:6b:5c:be:61:f5:80:22:62:b0:86:02:9b:b5:4f:ee:eb:
3a:6c:a6:a7:dc:8e:19:73:9e:a7:a6:75:29:b2:e9:3c:89:97:
cb:09:8a:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:07:04 2024 by rpki-client on console-fra.rpki-client.org