Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
File: WY3Vo5rkd2WK1by_42JkoaYdZwg.cer (raw, json)
Hash identifier: 2Ynl6b+0lTBQMYjZcCMebBr0AfSMvV4p1mY7ry4Lecg=
Subject key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DCF2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Feb 2024 03:54:05 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 136030
IP: 43.225.96.0/22
IP: 103.244.132.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122098 (0x1dcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 03:54:05 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:d1:99:14:f3:5c:84:15:70:25:b7:01:d4:
b1:f4:37:d1:18:7b:f1:e2:e3:d3:6e:25:f8:e3:3f:
58:54:30:3f:14:48:1d:a1:c3:67:66:cf:10:60:60:
f1:b7:e2:71:5b:5d:ea:ae:d4:cd:e4:26:b8:15:aa:
64:32:bb:bf:33:00:1d:83:29:e2:30:ac:fe:40:98:
dc:a4:66:4c:df:2f:1d:92:4b:59:c0:23:16:d2:d7:
4b:0f:c4:f9:8b:ee:15:a2:82:7c:db:a3:cf:f5:ae:
62:dc:8a:94:82:0d:08:50:2b:9f:c9:96:8a:e6:f2:
59:07:86:63:00:d0:6e:da:ec:a5:c4:41:54:36:e1:
b1:d5:ce:8d:d4:16:17:0a:52:70:dc:14:b4:fc:22:
95:c9:ab:c5:b0:39:8a:2e:48:3d:01:af:d3:46:cc:
f4:9c:0e:d2:04:d9:0d:20:98:6b:50:ab:b5:b3:44:
f0:6e:07:a2:54:7d:89:c5:49:29:ca:67:b6:ce:8a:
8b:6a:59:5f:7d:68:76:62:e1:56:73:e2:b0:10:35:
a2:6f:cd:f0:3f:de:ce:65:2e:ec:b7:3a:03:7b:81:
7f:0c:a7:71:45:98:4c:36:b4:a5:87:f1:d0:ca:f3:
02:5a:e3:4f:71:4d:82:ea:ea:ed:97:74:7a:4c:da:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136030
sbgp-ipAddrBlock: critical
IPv4:
43.225.96.0/22
103.244.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f7:b9:d9:da:b6:d2:c1:45:2b:8e:9e:87:93:bc:79:05:ef:
4c:9c:7e:c9:ac:f4:e5:2b:e2:db:b1:16:60:d1:bd:c6:06:8c:
6f:a2:ab:b6:4a:3e:ce:88:8e:a0:5e:25:77:61:40:50:20:40:
cb:e2:05:ac:60:37:4f:15:c0:3c:25:a7:6f:a4:6f:ea:43:c1:
74:f1:bc:a6:2f:ba:f3:68:8d:0f:5e:44:39:32:3e:7d:50:86:
e2:1c:72:9a:0e:bc:2a:67:e0:0d:69:89:07:bf:85:31:0e:6e:
4c:6e:cd:09:76:c2:6a:fb:a5:6c:6c:b6:97:a2:e0:5b:04:2f:
ac:f2:b7:a7:77:58:96:46:0d:28:a3:1b:53:69:bc:f6:7e:af:
fa:fa:cd:f1:5f:7b:15:38:f9:19:07:c4:9c:a1:ac:80:95:6e:
58:20:9b:c7:30:e2:91:f0:59:ea:8f:22:37:e3:56:8f:c0:18:
ca:e8:07:15:22:ce:03:31:3d:4e:83:7f:af:d6:9d:7e:b2:b8:
06:c5:ab:3c:7b:9b:4f:2b:32:fb:4f:e1:64:f0:8a:de:9f:17:
5d:b9:1d:27:fc:11:b8:b7:7d:fd:90:c2:bb:d6:d9:10:52:2d:
71:3a:f1:c7:42:1b:a7:1d:eb:82:81:45:f4:09:4d:13:a3:3a:
4d:d0:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:35:09 2024 by rpki-client on console-ams.rpki-client.org