Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
File: TH2sISA9rkFsH87q_FVlcgIiCKE.cer (raw, json)
Hash identifier: SxE3RSts8u+lftq/wGlc/XSImkfbS/l4wy9Qo8fmVl0=
Subject key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AF23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Jul 2023 21:18:28 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 151501
IP: 103.235.162.0/23
IP: 2001:df2:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 21:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110371 (0x1af23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 21:18:28 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:74:ca:5f:9d:81:59:42:74:b4:dc:1f:cf:
fb:17:e8:85:67:d2:8f:6a:d9:85:54:fc:69:d1:b5:
b4:52:19:df:eb:14:3b:2a:e1:c4:2d:eb:63:de:c6:
02:76:37:b2:17:ce:f1:63:57:d8:cc:88:0c:a8:25:
27:8c:93:76:96:f9:fb:73:63:19:29:18:b4:84:ef:
64:e8:7a:97:bc:dd:47:6b:47:62:e3:27:d2:e8:c3:
8b:ed:23:d4:a9:86:0a:e8:3c:56:68:90:6c:8f:bb:
ac:66:38:3d:b0:4f:86:d5:00:9f:81:bb:63:d2:3b:
3d:45:60:25:90:a3:9d:f8:8f:8d:9d:4a:b7:00:36:
22:f1:60:3b:80:cf:d9:88:01:69:2e:2a:a8:e0:20:
08:ee:eb:29:a6:a4:5d:75:33:b8:43:8c:62:52:bf:
07:e4:44:58:ee:f1:9f:98:fd:5e:e5:29:c8:6f:eb:
43:63:76:35:97:b3:72:bc:84:9c:6a:b8:45:1e:05:
a8:71:c3:30:3e:b9:48:93:80:8a:6e:23:ff:be:f2:
b7:05:19:83:1b:ff:ee:d2:8f:79:7f:f2:c2:5c:5e:
42:be:36:46:73:d8:c5:1e:0c:d9:75:bf:c5:76:c7:
44:3c:c3:5f:20:91:e7:cb:29:7e:dc:5e:11:b9:58:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151501
sbgp-ipAddrBlock: critical
IPv4:
103.235.162.0/23
IPv6:
2001:df2:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
3c:8a:48:b8:71:0b:60:cb:dd:1f:87:cd:d4:46:a9:7b:61:83:
a3:1e:21:3f:d7:cf:0f:8d:c2:81:8f:e3:11:a0:9a:fa:e6:33:
32:6f:b2:3e:c9:0a:e1:47:e8:d8:ce:ab:ad:34:89:fc:7f:fa:
ca:30:63:14:45:ab:bc:af:fd:f7:90:8a:b7:5f:8f:88:ff:da:
49:3a:7a:dd:76:c6:69:03:f4:d8:27:3f:cb:1f:9c:f1:55:8c:
1c:56:53:ac:0c:d8:7a:a9:01:e9:c6:ca:13:41:75:ec:44:a9:
88:3c:a0:57:9b:ad:c5:72:e2:2b:48:0a:10:a3:06:f4:b2:ee:
7a:6d:fe:5f:52:50:89:c3:18:1e:2f:f0:f2:04:84:ea:71:cd:
c3:ae:f5:24:cc:81:9f:38:9f:7c:39:29:fb:90:78:ba:31:4a:
dd:3b:c1:ce:12:5f:aa:8a:5a:31:5e:6e:cc:02:7e:af:ef:bb:
e4:ca:ee:45:6e:be:07:5b:26:55:e7:a4:1c:cd:7d:3b:a4:35:
a3:41:2c:97:cd:92:b9:14:34:bf:a0:ad:48:ca:c4:84:30:05:
88:67:28:21:4f:50:9d:73:e9:90:e0:ba:8b:06:41:81:5d:49:
73:5d:0e:4f:a6:d1:d6:05:b2:be:a7:b2:f9:7f:87:f1:82:c2:
ba:ec:bc:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 22:51:52 2024 by rpki-client on console-ams.rpki-client.org