Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
File: TySfPU9SKVXadOhT4AXndAZ6Oaw.cer (raw, json)
Hash identifier: onCKNlztdk7mTN4EBWr0+yWOf9kki6+M18g+eT70jOo=
Subject key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FD50
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jul 2024 20:17:39 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 141348
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130384 (0x1fd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 20:17:39 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:20:d8:74:62:b6:f0:f9:62:a0:3e:e0:df:
b8:35:c6:87:a5:3e:09:76:fc:7d:68:61:95:b6:7a:
90:3d:6d:fd:46:8d:35:0c:89:ee:38:05:43:21:63:
2d:68:5e:34:3b:44:e1:b0:bf:df:3e:9c:25:ca:54:
ae:eb:56:5f:9f:64:da:09:cc:6d:c6:ec:c6:fe:79:
19:d7:6d:7b:65:63:77:97:67:ac:73:f1:7a:f6:ff:
8f:6c:71:7a:1e:85:51:87:ff:5b:72:f5:5e:61:89:
09:af:1d:4a:7d:d7:69:ae:42:13:b6:ac:d0:61:5b:
b9:2b:e9:7f:83:bd:91:c1:2a:56:d4:21:c6:3f:d2:
a3:69:41:64:7b:d5:ed:f0:77:44:a3:99:84:41:25:
e1:b9:b8:24:3a:fa:f1:56:52:68:a7:a1:ff:58:19:
72:48:44:3d:95:46:4f:0c:be:43:e4:9e:31:41:9a:
82:bd:cc:49:af:0e:9f:d3:31:d3:fb:45:9a:3f:3f:
5f:88:3f:6b:5e:04:79:3c:02:fb:b8:2a:7b:70:2e:
f0:28:81:b6:fc:da:d7:70:ee:1f:c6:8c:f7:88:dd:
28:15:91:fa:a1:99:ae:7d:dc:37:47:7d:fd:78:30:
fb:ba:f9:89:3d:85:32:11:b1:73:1b:8f:5c:12:58:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141348
Signature Algorithm: sha256WithRSAEncryption
74:68:bc:f5:48:43:ab:68:67:d4:55:c4:6d:4f:32:39:98:1c:
33:09:23:13:e2:1b:7e:7c:76:40:d4:e5:bf:6a:6f:80:ca:c3:
90:e2:6b:b7:93:fa:4c:a8:e7:49:79:2d:ec:00:57:d9:e8:cb:
87:29:56:56:f9:a8:cf:37:7b:40:61:99:87:b7:59:ca:43:5d:
f6:ee:65:9f:67:d6:69:e2:b5:fe:8d:25:0e:49:3a:23:d9:26:
6a:e5:2a:c2:9f:4d:a2:6c:49:d7:7c:32:89:ad:bb:d1:a8:e2:
ad:2d:51:b4:6d:d7:54:07:04:7f:52:8e:a8:d0:4b:ca:71:12:
3f:c4:58:ea:5d:a6:70:ad:b4:10:9d:61:95:26:f9:ee:1a:9a:
e2:80:1b:58:de:88:5e:80:e7:1b:ba:da:a2:73:19:fb:b0:80:
2d:d9:3e:22:0b:d3:90:7e:27:26:40:ea:42:67:df:bc:82:5b:
64:b6:5f:a2:30:c4:6d:27:9e:91:0f:84:6e:73:fa:a0:60:2c:
4a:db:54:0c:ef:c6:48:ee:fb:85:50:4d:20:3d:5c:0d:8a:f2:
7f:24:be:d1:44:f4:89:2c:9b:b5:a9:13:ed:ff:a1:17:55:a4:
f8:68:4e:70:17:a1:73:0e:fb:13:43:34:ce:7d:c6:cd:73:56:
36:ee:99:ce
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAf1QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcwMjIwMTczOVoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1
M0UwMDVFNzc0MDY3QTM5QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTNyDYdGK28PlioD7g37g1xoelPgl2/H1oYZW2epA9bf1GjTUMie44BUMhYy1o
XjQ7ROGwv98+nCXKVK7rVl+fZNoJzG3G7Mb+eRnXbXtlY3eXZ6xz8Xr2/49scXoe
hVGH/1ty9V5hiQmvHUp912muQhO2rNBhW7kr6X+DvZHBKlbUIcY/0qNpQWR71e3w
d0SjmYRBJeG5uCQ6+vFWUminof9YGXJIRD2VRk8MvkPknjFBmoK9zEmvDp/TMdP7
RZo/P1+IP2teBHk8Avu4KntwLvAogbb82tdw7h/GjPeI3SgVkfqhma593DdHff14
MPu6+Yk9hTIRsXMbj1wSWKTRAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUTySfPU9S
KVXadOhT4AXndAZ6OawwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGMDZBL0ZDRjI3QUM2MzNBNDExRUJBQzU0ODUyRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5
U0tWWGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAigkMA0GCSqGSIb3DQEBCwUAA4IBAQB0aLz1SEOraGfUVcRtTzI5mBwz
CSMT4ht+fHZA1OW/am+AysOQ4mu3k/pMqOdJeS3sAFfZ6MuHKVZW+ajPN3tAYZmH
t1nKQ1327mWfZ9Zp4rX+jSUOSToj2SZq5SrCn02ibEnXfDKJrbvRqOKtLVG0bddU
BwR/Uo6o0EvKcRI/xFjqXaZwrbQQnWGVJvnuGprigBtY3ohegOcbutqicxn7sIAt
2T4iC9OQficmQOpCZ9+8gltktl+iMMRtJ56RD4Ruc/qgYCxK21QM78ZI7vuFUE0g
PVwNivJ/JL7RRPSJLJu1qRPt/6EXVaT4aE5wF6FzDvsTQzTOfcbNc1Y27pnO
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:32 2024 by rpki-client on console-fra.rpki-client.org