Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer
File: TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer (raw, json)
Hash identifier: GNPy7BMd0KLW+dGunnaMK0TZ38USiT5dJsAoa6uI+GM=
Subject key identifier: 4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B4D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Aug 2023 15:21:30 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 136597
IP: 103.93.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 14:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111827 (0x1b4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 3 15:21:30 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:d9:6b:97:ec:db:3c:a7:70:cd:b4:3f:63:
72:c4:ef:61:f3:a1:0c:42:7f:ea:06:ab:28:21:48:
73:b5:94:96:99:c9:58:dd:bf:bb:2d:19:18:87:9f:
a6:97:6d:71:93:57:eb:5c:aa:5a:38:ba:e6:bb:05:
7d:72:71:f5:fa:aa:e2:10:db:96:31:1a:af:fd:e7:
a9:c3:95:2f:bc:1b:be:bf:04:38:c0:46:0d:05:a3:
b1:3c:d5:22:8b:76:8b:65:17:82:a2:f5:1d:ca:88:
c4:15:5a:69:1f:f4:40:ed:ff:f9:5d:ce:7d:90:6d:
41:1e:3f:c9:df:f9:c0:06:76:ff:b7:d1:24:b0:0c:
ee:90:c0:24:b0:35:16:ff:64:78:33:23:49:ee:83:
35:68:15:2b:72:5c:a8:b9:59:c7:a5:d9:71:d4:3f:
64:f9:b7:0a:ee:12:ba:ce:b0:48:81:65:8b:d1:27:
b0:3e:e0:3b:28:71:b1:54:12:ed:cd:6a:cd:af:0e:
ca:3f:f6:06:31:b2:85:a2:7b:fa:6f:e9:3e:8f:3c:
cc:26:91:d1:1a:36:66:cb:85:ab:c3:ee:e5:ad:71:
97:96:3b:0d:0b:76:56:66:b4:b0:ba:06:55:f7:79:
7f:ab:e3:6f:9c:08:28:96:dc:95:49:20:fd:b1:5a:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136597
sbgp-ipAddrBlock: critical
IPv4:
103.93.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:a0:4e:b6:be:6a:18:7e:2e:11:66:e8:6d:88:e0:0d:69:44:
03:14:4a:11:7a:04:ed:72:aa:c8:14:50:a4:f4:9e:1d:04:3a:
49:d3:c5:2e:7c:d2:dd:e4:34:21:f6:2e:34:fc:44:60:ed:2d:
c0:25:ec:42:67:b7:e5:f0:4b:1e:f6:ac:25:d3:48:7b:e5:bd:
15:bb:14:b4:5c:4b:42:f7:06:ff:a5:ab:a5:96:63:f1:8b:9e:
7c:fb:25:4c:b2:a1:b0:40:ec:9e:12:b3:fe:e3:ff:31:5d:64:
60:9e:07:ce:74:ee:8b:a1:90:0f:44:ea:ed:ae:23:a3:c0:29:
25:32:a3:4a:00:75:ca:42:5e:79:eb:aa:96:0e:bd:33:de:90:
6f:ee:7e:2f:4c:b9:c6:ef:9a:bd:fb:b2:d1:8f:fe:5a:11:6f:
87:5c:d4:a2:1f:e2:64:d7:fb:93:05:c5:0e:9f:7d:a9:df:40:
b9:e5:9d:f7:d6:d2:76:0d:fc:d2:09:03:8a:17:b2:c9:d4:ad:
27:d9:fe:b7:66:15:41:31:65:71:a4:f9:72:10:20:92:8e:33:
ec:38:ff:fe:b0:04:47:6a:60:49:1a:05:37:62:8f:9d:9c:35:
6c:28:11:77:db:4f:1d:fb:3c:cc:79:f5:53:d2:03:17:0b:87:
76:d4:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:48:58 2024 by rpki-client on console-ams.rpki-client.org