Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
File: S9XCMYZ-JzlRVcAceEizsByGBvI.cer (raw, json)
Hash identifier: pzC8OuT1nha0ZeopsyZV6gFpYWk8BR84pV1IyqLdX3M=
Subject key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E007
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Feb 2024 14:42:14 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 149491
IP: 103.181.24.0/23
IP: 2400:5760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122887 (0x1e007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 21 14:42:14 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:c3:13:56:8f:3e:19:b9:4a:e3:85:2f:45:
31:c5:13:04:f0:a8:a9:e5:9c:dc:4e:ce:a6:92:0d:
5e:e5:23:0c:69:59:7c:1e:ee:bd:d7:7d:87:2d:33:
2a:fb:2d:a5:01:b3:60:e0:00:ca:bb:c1:b2:aa:e9:
89:b9:2e:c1:de:cc:51:5a:2d:b9:d2:9a:b6:ef:da:
21:d4:ad:2c:c4:2a:0a:ac:3b:14:4f:f7:3c:a7:af:
9d:23:5c:2c:29:5b:03:d8:01:ee:e1:a0:d8:88:1f:
08:d9:fd:e2:32:e1:a1:c4:68:ea:6b:b0:ae:5b:e5:
4d:2c:7e:4f:ca:27:20:d3:b9:0f:70:a4:de:d1:13:
dd:a7:2f:4f:de:91:7f:e3:51:d1:cf:86:85:92:59:
f4:e3:b4:b6:c5:67:09:18:f7:4d:56:31:34:3b:13:
73:b4:b2:be:5c:c4:f9:ad:cc:fe:e3:55:e2:c9:72:
35:ed:64:9c:9a:c3:f3:de:fe:32:9e:db:e3:b5:d3:
f7:78:04:f8:b2:c1:da:01:84:f4:26:c3:4b:7b:01:
98:78:4c:2b:88:17:08:30:c4:5b:8c:a6:fb:75:e1:
1f:f3:cd:23:54:1e:4f:63:0c:76:ec:30:f0:9d:a7:
62:c3:2e:da:48:40:be:73:db:d8:1f:29:cf:b2:51:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149491
sbgp-ipAddrBlock: critical
IPv4:
103.181.24.0/23
IPv6:
2400:5760::/32
Signature Algorithm: sha256WithRSAEncryption
59:47:f0:7c:20:c2:41:59:ea:04:79:95:02:61:96:bb:45:07:
f1:9a:fb:00:c1:ce:50:37:af:5c:a9:39:2c:61:da:c1:3a:08:
f3:5f:a2:63:e6:00:32:a6:d7:2b:f9:1c:d3:59:07:2a:33:94:
53:2b:a2:e6:24:08:0d:47:b0:a9:78:b0:77:05:f2:2f:d6:a7:
66:b1:c6:2b:d9:73:c9:ca:bb:b3:ad:93:50:7f:56:a0:67:a0:
fd:59:54:2e:05:4a:3c:25:4d:32:51:49:ee:bc:09:c8:65:30:
00:1e:23:e3:01:65:a4:48:73:f6:f9:6c:7f:e3:0a:7c:85:ed:
b3:d3:5f:e3:87:40:57:50:49:10:2c:60:89:cc:fb:a6:37:57:
00:5f:a5:11:42:c0:37:be:6b:f8:9c:80:23:13:6f:a4:d1:d7:
da:f3:42:21:1c:84:36:1a:ee:1e:6a:2d:67:a9:51:3d:61:66:
45:9f:3e:26:8a:fe:28:cb:59:fc:4d:3e:75:2e:0d:ba:38:ab:
75:b7:0f:38:62:c9:08:c9:81:47:28:6d:a7:f4:22:b3:51:75:
49:a5:75:4a:14:4d:9b:2a:dc:b1:46:e7:be:83:cf:78:f6:dd:
f9:b4:a0:26:05:5a:30:96:3e:12:85:9a:02:69:08:c0:66:69:
dd:ee:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:30 2024 by rpki-client on console-fra.rpki-client.org