Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
File: T96UkP8v8-m_k7SY108x916p_P8.cer (raw, json)
Hash identifier: f5OphtJqpXqM1y1Q3G3WGh52cXRf9y6mV/40wf28L0I=
Subject key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C472
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Oct 2023 02:34:11 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 138161
IP: 103.121.192.0/23
IP: 2001:df6:5100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 16:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115826 (0x1c472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 02:34:11 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:9c:7f:48:8b:96:ab:8c:5a:46:09:0b:f3:
9d:ae:51:00:56:ba:97:59:e5:31:dc:f4:bc:16:72:
40:b9:ed:ae:68:e0:7f:9b:ef:1b:54:4b:19:4d:f4:
6a:31:29:f0:bc:18:c5:88:c7:49:67:33:ba:44:50:
40:3e:43:13:7c:41:1e:30:5b:54:d9:83:47:08:f5:
92:37:28:be:27:dc:40:11:66:b5:af:a0:88:c1:8f:
96:28:79:92:68:dd:c5:7a:c0:7c:54:0c:14:c5:79:
a6:fd:f8:02:5d:d6:9b:e9:07:57:4d:9d:ba:ab:dd:
c3:56:ea:ae:c5:02:dd:a8:a0:43:33:c7:d9:a4:34:
82:ad:4d:0d:b4:e4:14:30:36:30:ac:c6:26:38:51:
d8:f1:82:0c:fd:17:af:25:64:3e:37:30:89:50:47:
03:59:cd:5f:61:3a:3b:40:fb:12:e9:72:70:de:fd:
d1:f2:09:24:77:59:f6:80:7a:81:72:4c:23:c9:ed:
01:24:dc:e0:66:f1:df:01:a5:9f:ce:6b:c7:9a:73:
4d:e7:c4:77:70:d7:4a:f4:b0:dd:f0:27:14:c7:7e:
49:ec:d3:dc:d5:19:19:2b:3f:be:37:e3:78:a3:38:
fa:11:48:81:e8:bb:26:5f:fe:84:6e:ce:0a:54:0f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138161
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/23
IPv6:
2001:df6:5100::/48
Signature Algorithm: sha256WithRSAEncryption
1d:5a:87:7b:34:91:f4:ef:49:e4:1a:a4:62:40:9f:d2:4f:2b:
ea:5e:64:3f:e2:1b:dc:05:63:18:4d:02:db:e6:ca:c1:68:54:
10:9f:56:39:d6:1b:e0:56:cb:15:f2:b9:60:10:8d:84:e5:cb:
af:39:79:65:c0:0f:77:16:ea:c1:90:15:f3:a2:d7:97:5e:da:
e3:81:18:be:bc:c1:21:6c:1c:71:dd:af:e5:4d:0e:d9:8e:fe:
08:f7:90:58:e5:e3:41:58:43:1d:04:d4:a5:7a:b8:3a:80:eb:
a5:f0:9b:61:51:c6:70:7f:2a:d4:76:46:19:02:e5:ad:b6:8c:
7e:a2:df:7e:21:1e:ca:0e:7e:37:ac:8c:b9:43:21:d2:b5:25:
7c:d6:d3:41:a3:0e:c1:fc:8c:74:a4:3f:e7:c1:ab:1b:f1:2d:
c4:bf:96:b7:e5:30:f3:f3:7e:cf:07:9f:b7:63:4c:80:bc:32:
06:f2:bd:43:8c:f9:df:c6:82:68:d3:ad:33:9b:fc:f3:e4:7a:
28:41:e6:0f:cc:f8:4e:56:39:ce:e6:b9:fa:16:00:9b:10:c8:
0a:d2:e6:47:8c:da:e2:19:91:22:c2:bc:0f:2c:15:41:8a:b8:
45:e5:06:f3:3e:2b:b5:21:d6:c3:f3:d5:55:2c:57:3b:d8:43:
16:50:d8:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 17:12:20 2024 by rpki-client on console-fra.rpki-client.org