Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer
File: WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer (raw, json)
Hash identifier: z4Yw4/f7VOg8PUgXMHgH7KcaPnCRfXD29Z8UqLdPIZo=
Subject key identifier: 58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C314
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Oct 2023 10:07:55 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 151351
IP: 103.134.148.0/23
IP: 2401:2e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 04:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115476 (0x1c314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 10:07:55 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:9d:67:a6:eb:7a:f6:04:25:b6:81:80:67:
89:28:73:d6:34:2c:a0:22:56:1b:42:e4:27:68:d5:
3a:61:6f:23:28:31:81:c4:b5:e4:88:b6:ae:1a:72:
31:68:03:0c:98:6d:61:b4:0a:ce:ad:70:18:d8:26:
b8:b8:25:9a:08:a7:e7:dc:cc:12:e8:fe:62:e8:da:
68:f8:bc:f2:d6:bb:78:c2:b4:f1:75:58:2b:a6:d3:
40:be:a1:b6:79:fe:40:ac:34:b4:81:6c:ec:bd:46:
e9:a7:99:c4:9f:25:61:96:19:5a:b1:e5:39:3c:12:
6c:c2:3c:01:ef:93:8e:cd:8c:65:f7:c0:f0:d3:48:
9e:41:b7:35:dd:f5:2a:9c:d5:a5:f6:bf:a9:64:83:
7d:38:bf:bc:3f:48:a4:fb:8e:53:6c:b1:cb:3a:1c:
4b:6e:f7:5a:d7:5e:c3:e8:26:1a:84:47:5c:8a:ab:
cf:81:95:dd:42:98:3a:dd:8d:db:a3:6b:05:ae:d2:
30:ef:59:40:0f:82:a7:f4:ff:4a:33:ab:26:a4:f8:
dd:f4:e4:a5:73:8c:2f:eb:b7:8e:f7:23:86:f5:57:
86:77:68:99:8a:af:eb:84:34:5d:ba:6e:aa:f4:71:
93:0a:74:72:aa:6e:bd:fb:62:86:fb:a4:4a:b5:71:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151351
sbgp-ipAddrBlock: critical
IPv4:
103.134.148.0/23
IPv6:
2401:2e0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:ea:ad:8d:21:2f:6c:e8:81:f4:28:dd:1c:04:31:e8:6b:ab:
df:e5:05:4a:ff:e1:aa:f0:c0:e0:38:77:69:a2:ed:c5:52:ad:
bb:42:18:05:d2:5b:e2:22:eb:d3:a8:87:b1:60:4e:2f:a6:c7:
e6:c4:1a:5c:12:f6:a3:bc:6f:1e:bb:78:cf:d1:98:64:db:68:
38:17:1f:46:f6:39:f0:63:5e:9b:f3:e7:66:2d:de:85:ae:63:
0b:4c:b9:75:d7:62:a5:be:ba:7a:fa:8a:f0:37:ae:31:cc:91:
52:96:66:8a:4c:65:03:b5:7c:14:db:06:f9:a3:2c:50:09:9d:
c8:d1:b2:e4:ad:76:0e:50:b1:92:72:e7:e0:b1:d8:87:22:24:
10:57:20:44:78:86:d4:c7:19:45:a8:41:6c:6f:29:21:e5:02:
83:a1:af:9b:88:f7:e1:5d:2b:a9:33:e2:16:bb:2e:95:5b:a8:
1e:08:e0:e3:11:c9:91:68:18:3b:a8:9f:b0:24:c8:56:57:89:
56:ec:87:cc:eb:45:f3:cb:71:e7:11:20:c8:f2:27:ee:4c:69:
03:dc:11:11:d6:24:24:c4:aa:55:fd:5d:0e:40:3e:8b:bd:cd:
30:a6:7a:c2:28:31:1d:81:2e:7f:52:80:07:b2:e2:65:69:07:
50:14:e2:ba
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAcMUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAxMDEwMDc1NVoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDU1QkUxMTAvBgNVBAUTKDU4MzlENDQ1QkEzQjNGNTNFMkQwQTQy
MDIzMTAwQjE4NzVBOTYxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJDJ1nput69gQltoGAZ4koc9Y0LKAiVhtC5Cdo1TphbyMoMYHEteSItq4acjFo
AwyYbWG0Cs6tcBjYJri4JZoIp+fczBLo/mLo2mj4vPLWu3jCtPF1WCum00C+obZ5
/kCsNLSBbOy9RumnmcSfJWGWGVqx5Tk8EmzCPAHvk47NjGX3wPDTSJ5BtzXd9Sqc
1aX2v6lkg304v7w/SKT7jlNsscs6HEtu91rXXsPoJhqER1yKq8+Bld1CmDrdjduj
awWu0jDvWUAPgqf0/0ozqyak+N305KVzjC/rt473I4b1V4Z3aJmKr+uENF26bqr0
cZMKdHKqbr37Yob7pEq1cWGtAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUWDnURbo7
P1Pi0KQgIxALGHWpYXQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1NUJFL0REREE3RUQ2Njc1NDExRUU5REU3MDE0M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NTVCRS9ERERBN0VENjY3NTQxMUVFOURFNzAxNDNDNEY5QUUwMi9XRG5VUmJv
N1AxUGkwS1FnSXhBTEdIV3BZWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk83MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ4aUMA0EAgAC
MAcDBQAkAQLgMA0GCSqGSIb3DQEBCwUAA4IBAQAs6q2NIS9s6IH0KN0cBDHoa6vf
5QVK/+Gq8MDgOHdpou3FUq27QhgF0lviIuvTqIexYE4vpsfmxBpcEvajvG8eu3jP
0Zhk22g4Fx9G9jnwY16b8+dmLd6FrmMLTLl112Klvrp6+orwN64xzJFSlmaKTGUD
tXwU2wb5oyxQCZ3I0bLkrXYOULGScufgsdiHIiQQVyBEeIbUxxlFqEFsbykh5QKD
oa+biPfhXSupM+IWuy6VW6geCODjEcmRaBg7qJ+wJMhWV4lW7IfM60Xzy3HnESDI
8ifuTGkD3BER1iQkxKpV/V0OQD6Lvc0wpnrCKDEdgS5/UoAHsuJlaQdQFOK6
-----END CERTIFICATE-----
Generated at Thu May 2 05:27:55 2024 by rpki-client on console-fra.rpki-client.org