Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
File: QhgvX3GliYTOiFmuYKTKynP-g2E.cer (raw, json)
Hash identifier: r02nLoLZq3VyXOgJCkOGr/4Ix+97qZG/If7qGn4ye6c=
Subject key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BDCA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Sep 2023 15:14:05 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.99.168.0/24
IP: 2401:b140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114122 (0x1bdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 15 15:14:05 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:53:a5:03:81:3b:66:6a:16:72:43:d8:c2:
45:15:8a:bb:93:ff:fb:28:8d:ad:0c:2c:cf:c3:97:
e5:fb:f3:47:7e:4a:66:24:14:fe:5e:9e:ef:87:6e:
b1:b5:4e:fd:f2:37:3f:2b:52:38:52:26:9d:59:f9:
b6:34:65:da:e2:af:75:68:cd:fc:c5:d0:e8:f0:45:
ab:6b:f4:c3:d7:6e:29:43:a3:93:32:50:0f:2c:f0:
e9:5d:d6:b1:cc:01:2d:23:9e:74:dc:d5:eb:3b:02:
cb:eb:19:34:32:f9:3d:6e:24:83:ec:9e:98:29:ed:
1d:bc:24:92:15:22:73:00:1d:3e:30:68:e5:13:28:
ca:1d:25:09:fd:98:ff:92:53:71:06:2f:91:10:3e:
04:90:28:97:ad:e0:dc:b2:e8:0a:67:25:ee:ae:f4:
10:05:69:7b:16:6a:e6:0d:10:a2:e1:d5:1e:b3:a9:
d4:f7:98:3e:ed:30:fd:f7:d0:c3:cc:eb:30:06:8d:
4b:cd:2f:c6:f3:34:07:70:0e:07:b6:4a:cb:5b:18:
04:e9:37:01:2b:11:e5:25:fe:a4:c5:ac:5f:95:0b:
ad:9c:36:31:06:fd:bf:1b:a4:29:04:23:e7:59:eb:
c2:12:d4:f8:e4:30:c8:01:57:99:cb:80:51:39:ac:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.168.0/24
IPv6:
2401:b140::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d0:86:7f:47:77:fe:ae:5e:a6:ef:61:f7:33:7f:91:24:4e:
9e:46:b4:b8:ed:d3:10:fb:54:97:ed:36:7c:18:c1:df:97:8f:
52:96:51:71:e4:f0:d5:db:2e:3b:d2:df:19:2c:d8:ae:64:c8:
82:13:93:99:94:c9:1a:59:d4:b6:82:60:3c:f7:26:32:6b:17:
46:df:d2:03:dd:66:90:a5:46:c5:7f:ef:cc:02:42:84:b6:d8:
ea:14:6c:7b:9d:a0:62:c8:5d:b1:98:42:45:2f:28:ef:df:54:
6e:36:7b:94:7c:5c:61:f0:21:1e:ff:57:71:41:9d:d7:92:bd:
23:e9:3a:78:e2:39:22:b7:a4:d7:1c:03:8d:d6:f1:0a:fa:bc:
15:57:c7:12:f6:72:b2:71:64:bc:81:1d:f6:51:e1:e4:9b:41:
ae:ef:42:2e:8d:a2:90:cf:f3:94:52:f5:1b:a6:d5:af:da:35:
9e:c0:32:21:c7:9c:a5:3a:98:bf:1e:45:99:94:3b:f2:4e:81:
76:6b:7c:db:6d:cc:8a:1e:b5:8c:1c:ff:6f:9e:a5:f6:9b:47:
a7:33:cc:20:da:09:30:b1:9e:9c:e8:ca:62:c9:ff:44:ed:14:
e3:f4:43:17:dc:18:11:55:2f:b8:06:9a:e8:e0:3b:27:4c:9a:
40:c5:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:35:04 2024 by rpki-client on console-ams.rpki-client.org