Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
File: SyWxRyDwREuz1mj5Y1hDVPf6whM.cer (raw, json)
Hash identifier: tywMo+fawzmlNcaV7MhFgcQ5BaDO5+t+NIKJEi7LDws=
Subject key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E1AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 01:02:12 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 149018
IP: 103.88.89.0/24
IP: 103.176.118.0/24
IP: 2001:df0:d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123309 (0x1e1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 01:02:12 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:ea:7a:01:11:95:8b:da:92:5b:40:a8:4e:
c4:12:40:7e:bf:2e:06:47:40:0b:8a:0f:5f:a3:63:
f9:23:27:fb:46:4e:20:91:b9:94:ff:c9:01:c5:d0:
ba:1d:79:1a:04:26:f9:72:21:a8:76:a4:34:69:af:
04:74:bc:e2:8a:bf:4b:c9:12:fc:a9:92:3c:1e:87:
5f:a6:d5:fb:f6:45:07:f1:c1:0d:27:30:7c:5b:c8:
84:af:50:e8:96:17:74:80:96:ed:c5:46:30:dc:1e:
71:bb:37:f6:ae:fe:90:bc:e3:5f:7f:b7:e5:35:bb:
77:c7:43:8f:74:91:1f:6e:0c:a5:ce:5c:37:6f:e0:
a6:af:24:52:f5:94:15:b3:5f:5f:23:55:c9:29:96:
8f:cb:a5:a5:12:1a:84:d3:53:a7:32:7e:6a:97:ce:
b4:52:2b:ce:77:33:86:7f:c2:28:f6:99:a4:bf:b8:
e6:a9:9d:56:aa:00:73:5f:76:79:44:86:cd:81:3b:
48:bd:25:8d:73:e9:82:e4:7e:44:31:38:d0:b5:82:
55:eb:ac:f8:ed:79:61:33:97:fc:49:00:6f:bf:12:
b2:9d:7a:1d:7b:3a:35:91:64:65:50:13:86:02:c6:
11:5f:64:c2:e3:3b:86:da:3d:57:ed:8b:15:be:e5:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149018
sbgp-ipAddrBlock: critical
IPv4:
103.88.89.0/24
103.176.118.0/24
IPv6:
2001:df0:d40::/48
Signature Algorithm: sha256WithRSAEncryption
3a:89:6b:ff:a4:d0:d7:f8:e9:10:48:28:18:a0:16:46:a5:7e:
b0:6e:de:d4:e3:eb:d7:11:23:59:29:ea:41:89:01:0c:ab:bf:
e7:89:61:4e:b0:1b:9c:ca:c6:45:c6:55:fa:6a:62:42:b4:74:
20:e8:f5:ed:97:c9:14:d7:f1:4e:b2:b5:97:f0:6b:1d:2e:0e:
51:45:e8:cc:f4:8f:15:79:7a:82:cb:24:b2:b3:3e:47:20:0a:
b2:ac:51:eb:56:5e:f6:63:69:17:f1:95:a5:49:cc:1b:24:82:
ef:88:16:ae:7f:bb:88:3c:51:d9:1c:e6:d0:9f:81:0a:e2:ce:
39:ea:22:59:eb:3e:6f:a9:60:02:ac:57:50:e4:2c:2a:b3:9f:
8a:43:20:ee:51:1d:1a:f7:4d:f6:31:c2:21:86:0d:ba:73:88:
5a:57:98:b7:b3:c4:c8:19:83:ef:fc:c4:3b:ff:18:c4:33:9e:
aa:b2:fd:b6:5f:f5:3b:ea:71:21:49:9c:a3:51:da:f7:f6:5c:
9f:01:03:2f:84:3a:6a:08:97:08:64:50:77:d0:71:5f:bc:27:
3d:6f:c0:83:1b:c0:f0:a9:28:5d:c1:4c:0d:ad:74:dd:e3:48:
56:90:0e:4b:24:87:d2:b2:8c:21:f8:a8:0d:e2:f9:6f:a1:97:
97:36:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:33 2024 by rpki-client on console-ams.rpki-client.org