Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer
File: VKXY-_hOPt8x-iTkXGxnKpO2WtA.cer (raw, json)
Hash identifier: vLcDLwXCa8GGVx136i/c1zca/QFExpmIVOt7ol0nqoM=
Subject key identifier: 54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C7B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Nov 2023 00:10:24 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 151976
IP: 103.67.56.0/23
IP: 2401:47a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116663 (0x1c7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 00:10:24 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9189AA3/serialNumber=54A5D8FBF84E3EDF31FA24E45C6C672A93B65AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:00:e3:cd:a3:cd:02:ce:6c:dc:a7:40:df:
05:52:50:c6:2a:10:aa:22:dc:6a:31:b2:28:42:25:
14:8d:2e:08:ef:41:b2:00:09:2d:15:f1:a7:a1:08:
3c:5d:85:45:ae:97:be:aa:cd:eb:a2:13:e2:b9:f5:
82:e4:a7:79:a7:f4:00:e2:e9:33:3e:0e:61:99:54:
21:6e:e6:89:c8:6f:46:4c:b3:3b:cc:1f:fd:5f:31:
6c:aa:ef:27:73:0c:16:41:e4:7f:1c:f3:f8:d7:91:
9a:55:3e:7d:fd:80:d0:bb:44:b1:11:c1:ce:ce:10:
e2:c4:fc:cd:64:99:82:77:53:90:cb:3d:7c:19:5e:
5f:b0:48:d8:3e:a7:5e:05:9f:f7:b1:09:b0:ac:63:
79:30:10:9f:82:f7:96:6e:e9:63:5a:62:4e:95:0a:
9c:c4:5e:96:cf:b3:0a:d6:c2:3f:0f:72:20:3b:d1:
7d:4e:58:f4:22:c3:f1:86:3c:0d:bb:ea:31:ba:8f:
fc:4f:ca:e0:12:aa:70:40:7b:b9:50:78:21:67:03:
f9:c7:94:72:e0:20:1b:25:e6:e9:70:4e:23:8b:2a:
df:ce:0f:03:7a:e1:3a:cf:d9:71:ca:63:54:33:ec:
f9:85:aa:6d:e5:1b:46:d3:59:c9:ca:04:d4:d4:39:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:D8:FB:F8:4E:3E:DF:31:FA:24:E4:5C:6C:67:2A:93:B6:5A:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189AA3/0A2CB786784B11EEA4D7DB77C4F9AE02/VKXY-_hOPt8x-iTkXGxnKpO2WtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151976
sbgp-ipAddrBlock: critical
IPv4:
103.67.56.0/23
IPv6:
2401:47a0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:c8:ca:2b:ba:6a:7f:fb:64:67:4a:1d:7d:ad:fd:d1:5d:a2:
7e:81:54:15:77:e6:1c:e3:65:61:87:e4:48:db:23:40:40:9a:
19:42:63:ae:6f:61:38:5b:ac:dd:88:c0:a2:50:05:46:9c:06:
24:72:8e:5d:2a:ee:4b:a1:b6:4c:70:c4:f6:9f:43:f4:9a:94:
cc:c7:e3:b4:0f:de:a2:23:a8:9b:ef:01:2b:8d:28:06:f1:1b:
a3:7b:72:bf:2e:68:fa:f9:bc:6d:d2:e9:c3:f8:55:fd:b8:c1:
15:4f:55:12:6c:11:2c:19:c3:26:d1:77:a4:21:7b:ba:d3:e7:
57:36:60:c3:7a:bb:e2:1c:32:86:82:85:46:f3:76:3d:5d:e4:
5a:fa:e9:63:4f:f3:d1:ea:84:de:3f:25:a3:5a:0c:ac:2a:94:
1e:f0:2b:28:09:1a:9b:ac:73:df:9a:4a:0b:15:97:a9:a1:c4:
55:fe:1b:2b:34:0f:9a:b8:8f:95:1e:e4:12:3e:39:26:d8:44:
b9:82:61:0b:e9:e7:c7:66:1a:2b:01:24:7c:f9:01:af:e8:70:
f6:44:13:81:36:06:60:d7:8f:e8:46:51:80:d9:a3:d7:41:dd:
df:88:89:3b:11:ac:da:9b:b7:a8:ce:e9:04:a7:47:88:21:1e:
c2:44:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:53:13 2024 by rpki-client on console-ams.rpki-client.org