Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
File: WpbU7D01JJTZI51SrzWsEE2hL50.cer (raw, json)
Hash identifier: yxPEeEmvaTdbWEN57ojHdmSjhwGSEFUdVILFoIlaric=
Subject key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DAF9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jan 2024 13:05:37 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 9831
AS: 10085
AS: 24235
IP: 103.3.192.0/22
IP: 202.3.160.0/19
IP: 202.55.224.0/19
IP: 202.153.160.0 -- 202.153.207.255
IP: 2400:1300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121593 (0x1daf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 29 13:05:37 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:22:3e:0b:a4:e3:eb:76:4b:3e:bc:ee:76:
60:de:cd:5d:94:5d:82:f3:7a:d5:e5:09:db:9a:80:
c8:a9:b1:ae:d6:f6:2f:3b:77:f4:fa:35:61:c8:9c:
5e:42:25:43:93:8a:0a:8d:fb:3d:27:24:0f:d8:2d:
39:fd:d6:b8:c5:02:df:14:9a:aa:8f:88:11:6c:d2:
99:44:b9:b1:07:95:46:24:5d:50:af:bb:7a:c3:93:
c5:7f:19:ef:1a:b9:04:d8:79:75:cc:d9:29:88:05:
9d:9d:7b:7b:26:69:6c:be:bc:58:0b:0f:6d:6a:ac:
82:3d:01:f8:0f:06:8d:66:5c:1b:83:44:6c:94:4d:
48:3e:6f:1e:f8:c0:a1:fe:d3:5d:5d:97:27:e9:34:
13:9b:b2:ff:ca:2d:a4:e9:4d:b5:2b:09:3c:83:ae:
39:bc:91:d4:6e:8d:93:6b:ea:fe:56:98:5a:85:9c:
dc:5f:07:e6:d2:71:d5:9d:8a:54:08:8c:c3:35:b0:
88:f7:5c:80:25:10:da:d8:93:54:0a:65:75:d1:3c:
73:30:e0:31:a4:ed:c6:64:3b:e1:a2:f4:d1:d3:e3:
39:f2:16:2a:a1:ba:0b:07:60:08:06:31:fc:58:8b:
09:57:cd:97:55:b2:93:bc:b4:7c:4e:5e:70:d4:0b:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9831
10085
24235
sbgp-ipAddrBlock: critical
IPv4:
103.3.192.0/22
202.3.160.0/19
202.55.224.0/19
202.153.160.0-202.153.207.255
IPv6:
2400:1300::/32
Signature Algorithm: sha256WithRSAEncryption
1d:f8:75:c7:9b:94:2d:96:53:5d:bb:83:be:fb:88:22:e1:e5:
57:94:ec:9a:87:af:98:fd:55:c4:c0:82:93:81:94:d3:73:99:
06:14:a6:f8:fa:b5:94:d4:f8:1b:e2:02:44:4e:c9:a6:15:c0:
79:43:76:8c:ac:ee:3c:40:1c:4a:b8:95:f3:c5:d0:34:a8:a4:
7d:91:f0:cb:c9:7e:3d:40:4c:f3:08:dc:87:9d:0a:51:61:19:
7c:68:fc:54:11:f0:34:3f:32:b4:68:25:99:7f:c3:aa:dd:c0:
64:a6:17:f4:7b:a7:7a:c5:24:b5:5d:b9:6c:d9:04:51:14:47:
43:66:cf:6e:d5:bd:6c:6c:58:7c:1c:0e:90:4d:3c:62:ab:18:
fd:c9:f6:cc:9f:5c:c1:28:f0:76:e5:60:50:6c:b1:5d:fb:02:
d1:0c:0f:28:db:83:7e:d1:9c:23:3c:b5:1c:a1:e3:77:a8:54:
d5:c6:c7:61:af:c0:33:78:b3:07:dc:77:01:ff:f8:b0:67:38:
0c:f3:9b:36:a3:bd:bf:68:47:4f:24:cd:2c:dd:a7:cc:2f:58:
4b:0f:5d:a3:e3:d2:87:83:e7:ed:91:48:48:be:5d:20:b0:d1:
38:48:c1:8e:d3:f8:53:27:78:73:36:40:e4:00:42:33:22:09:
68:90:7f:c1
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIDAdr5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDEyOTEzMDUzN1oXDTI1MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1
MkFGMzVBQzEwNERBMTJGOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCybyI+C6Tj63ZLPrzudmDezV2UXYLzetXlCduagMipsa7W9i87d/T6NWHInF5C
JUOTigqN+z0nJA/YLTn91rjFAt8UmqqPiBFs0plEubEHlUYkXVCvu3rDk8V/Ge8a
uQTYeXXM2SmIBZ2de3smaWy+vFgLD21qrII9AfgPBo1mXBuDRGyUTUg+bx74wKH+
011dlyfpNBObsv/KLaTpTbUrCTyDrjm8kdRujZNr6v5WmFqFnNxfB+bScdWdilQI
jMM1sIj3XIAlENrYk1QKZXXRPHMw4DGk7cZkO+Gi9NHT4znyFiqhugsHYAgGMfxY
iwlXzZdVspO8tHxOXnDUC4zPAgMBAAGjggM/MIIDOzAdBgNVHQ4EFgQUWpbU7D01
JJTZI51SrzWsEE2hL50wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5RTNBLzE5N0VDMEI2MUQ4NjExRTJBQkVGMjJERDA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyOUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0Qw
MUpKVFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQgBAf8EEjAQ
oA4wDAICJmcCAidlAgJeqzBIBggrBgEFBQcBBwEB/wQ5MDcwJgQCAAEwIAMEAmcD
wAMEBcoDoAMEBco34DAMAwQFypmgAwQEypnAMA0EAgACMAcDBQAkABMAMA0GCSqG
SIb3DQEBCwUAA4IBAQAd+HXHm5QtllNdu4O++4gi4eVXlOyah6+Y/VXEwIKTgZTT
c5kGFKb4+rWU1Pgb4gJETsmmFcB5Q3aMrO48QBxKuJXzxdA0qKR9kfDLyX49QEzz
CNyHnQpRYRl8aPxUEfA0PzK0aCWZf8Oq3cBkphf0e6d6xSS1Xbls2QRRFEdDZs9u
1b1sbFh8HA6QTTxiqxj9yfbMn1zBKPB25WBQbLFd+wLRDA8o24N+0ZwjPLUcoeN3
qFTVxsdhr8AzeLMH3HcB//iwZzgM85s2o72/aEdPJM0s3afML1hLD12j49KHg+ft
kUhIvl0gsNE4SMGO0/hTJ3hzNkDkAEIzIglokH/B
-----END CERTIFICATE-----
Generated at Fri Apr 19 03:16:08 2024 by rpki-client on console-fra.rpki-client.org