Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer (raw, json)
Hash identifier: kSAq1kVzE11fPE66Elai10ow/fDZgFTuH6YWVDo/2Xo=
Subject key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A078
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 May 2023 22:54:54 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.90.172.0/24
IP: 103.97.175.0/24
IP: 103.97.200.0/23
IP: 123.253.224.0/22
IP: 2001:df0:e100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106616 (0x1a078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 22:54:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:3c:e9:87:8e:b3:5c:dd:e8:bc:4e:76:d4:
10:07:c4:e2:99:4f:73:35:d6:0b:2f:06:38:ac:2b:
88:89:e7:a4:bb:82:43:60:19:44:6f:a1:8c:78:df:
3a:53:36:32:e0:da:09:16:c4:fe:1a:37:f3:d8:76:
d9:e5:50:c4:5c:84:f1:58:63:aa:32:ad:22:ef:da:
5b:94:79:ce:a8:ef:9d:fa:ee:cb:d6:4a:d1:2b:d0:
c7:de:43:09:34:a8:7f:8c:c6:20:7c:04:c3:08:4e:
c7:ef:54:3b:fb:e9:76:99:3d:8a:2b:2c:7f:e1:3e:
66:76:70:a2:fb:cd:9e:66:b8:a4:6b:66:9d:09:14:
74:db:bd:ad:59:ff:04:10:b2:bd:54:dc:e7:da:c7:
9f:87:0e:00:54:c6:77:4a:cd:2e:ec:ea:7a:5f:c5:
2f:9d:2e:07:69:74:77:5a:00:74:5e:57:6e:ca:6a:
47:8c:8c:29:a8:84:88:57:80:04:0c:0f:8a:3b:14:
c3:9b:81:f9:08:72:b6:68:58:05:38:10:60:fa:3a:
12:90:1f:5b:9b:e6:5a:84:71:a9:28:ab:c5:4f:8d:
78:4d:58:7c:54:a3:4f:79:14:40:be:45:63:b6:7b:
6d:10:0e:df:78:bf:2e:19:14:37:82:c2:e0:07:32:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.172.0/24
103.97.175.0/24
103.97.200.0/23
123.253.224.0/22
IPv6:
2001:df0:e100::/48
Signature Algorithm: sha256WithRSAEncryption
2d:89:f3:7a:84:ae:a6:7d:ba:73:f9:4a:ca:a2:b3:38:ee:38:
63:46:3f:c8:e9:2c:e9:5d:de:09:b7:27:02:6c:92:8d:fc:4f:
9e:0c:a8:5d:36:e0:91:66:31:04:9c:45:0d:90:5e:6e:f4:c1:
29:f2:28:2a:1d:ba:1b:55:ae:b2:ae:e2:0b:04:8d:21:be:b5:
9e:32:c4:e2:36:f7:c6:0d:75:ec:34:85:b4:c4:67:d7:3f:40:
17:7c:a3:57:0a:1c:5c:51:39:eb:f7:48:88:ee:1b:ac:1c:6e:
81:b4:23:e7:aa:66:79:f6:d2:5d:66:dd:67:76:6a:ca:f6:00:
51:ee:9c:5a:30:ae:91:ac:51:27:9c:d8:c8:24:53:81:f4:53:
7a:ee:49:7b:23:a0:08:bb:d8:9f:4b:43:a2:21:4f:2a:79:df:
1e:04:09:df:44:e8:39:49:97:2f:4f:80:6d:ff:ff:b5:2a:3c:
35:9d:9d:92:a1:99:61:50:58:d8:60:2e:f8:0c:21:70:45:54:
7d:fb:79:7c:48:bd:bc:01:33:32:27:5d:28:6e:8a:f0:48:46:
f2:cc:2d:74:06:3f:bd:a6:d4:43:ff:59:c5:76:2b:7b:2c:88:
94:40:d9:0c:60:1b:14:d0:eb:28:4f:f8:e5:78:54:34:53:bf:
27:b9:1b:82
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIDAaB4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDUwMTIyNTQ1NFoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1
NzYyMTE5MDRGMDVCQUYyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvOTzph46zXN3ovE521BAHxOKZT3M11gsvBjisK4iJ56S7gkNgGURvoYx43zpT
NjLg2gkWxP4aN/PYdtnlUMRchPFYY6oyrSLv2luUec6o75367svWStEr0MfeQwk0
qH+MxiB8BMMITsfvVDv76XaZPYorLH/hPmZ2cKL7zZ5muKRrZp0JFHTbva1Z/wQQ
sr1U3Ofax5+HDgBUxndKzS7s6npfxS+dLgdpdHdaAHReV27KakeMjCmohIhXgAQM
D4o7FMObgfkIcrZoWAU4EGD6OhKQH1ub5lqEcakoq8VPjXhNWHxUo095FEC+RWO2
e20QDt94vy4ZFDeCwuAHMn//AgMBAAGjggMWMIIDEjAdBgNVHQ4EFgQUUdXMLV5C
j8lVFJ9XYhGQTwW68hEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE3NzYxLzBFNEI5MTY4QkQzNDExRUI5MEU1NTQyOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1
Q2o4bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8EMzAx
MB4EAgABMBgDBABnWqwDBABnYa8DBAFnYcgDBAJ7/eAwDwQCAAIwCQMHACABDfDh
ADANBgkqhkiG9w0BAQsFAAOCAQEALYnzeoSupn26c/lKyqKzOO44Y0Y/yOks6V3e
CbcnAmySjfxPngyoXTbgkWYxBJxFDZBebvTBKfIoKh26G1Wusq7iCwSNIb61njLE
4jb3xg117DSFtMRn1z9AF3yjVwocXFE56/dIiO4brBxugbQj56pmefbSXWbdZ3Zq
yvYAUe6cWjCukaxRJ5zYyCRTgfRTeu5JeyOgCLvYn0tDoiFPKnnfHgQJ30ToOUmX
L0+Abf//tSo8NZ2dkqGZYVBY2GAu+AwhcEVUfft5fEi9vAEzMiddKG6K8EhG8swt
dAY/vabUQ/9ZxXYreyyIlEDZDGAbFNDrKE/45XhUNFO/J7kbgg==
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:53 2024 by rpki-client on console-fra.rpki-client.org