Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer (raw, json)
Hash identifier: mej5zFZOc2wb+RgaxhxG0rOypu8/fuMnDXcwY86QsyI=
Subject key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B5D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Aug 2023 19:57:06 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 149857
IP: 103.189.4.0/23
IP: 2400:83e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112085 (0x1b5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 8 19:57:06 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:d0:ba:27:94:b5:76:07:46:54:38:04:7d:
09:bf:91:23:c9:44:ca:d3:b9:aa:0a:49:9c:d3:90:
bc:aa:2c:d3:a1:10:75:07:ab:fc:df:43:6c:00:b6:
29:05:0e:0d:f5:20:cb:ed:f3:99:b2:29:da:d4:9a:
40:1d:aa:76:ea:92:ee:83:7f:da:0d:a3:d2:97:1e:
6f:3f:1d:0b:31:f0:c1:c3:4b:4b:da:b8:12:b3:eb:
6b:9c:ec:ca:e5:8a:a9:72:f0:3a:a1:7a:e9:16:cc:
f5:3b:ca:64:ea:d6:17:93:c9:44:37:1f:63:97:ad:
63:50:ef:35:ca:a7:92:15:a0:08:61:c3:57:ef:3b:
52:fc:ec:bf:03:d3:23:ce:da:be:ea:43:3f:65:bc:
a9:b4:5f:f6:83:64:6d:2e:c7:37:d5:ed:36:20:12:
00:ca:8e:cf:90:56:13:03:44:ec:f4:4a:78:a2:62:
97:7c:ab:cd:d7:9a:52:d2:46:d0:7c:cb:a5:4e:13:
2a:89:e7:be:8a:d3:f5:04:7d:52:49:12:a7:ed:9e:
93:ee:40:c0:c8:1b:da:06:ec:5c:83:7f:b2:27:20:
99:2a:ac:b9:36:4f:f6:6a:26:78:d9:a3:56:30:93:
e6:8e:ad:29:87:de:6e:c0:1d:12:4f:c1:9b:b1:e8:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149857
sbgp-ipAddrBlock: critical
IPv4:
103.189.4.0/23
IPv6:
2400:83e0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:b7:da:8f:c7:67:c6:df:c5:1c:bd:6e:52:56:0f:8d:9d:a5:
bd:63:3f:0a:e8:16:7d:81:f4:69:5b:61:12:ed:e0:4a:de:89:
4f:7c:e1:27:aa:ae:0a:4c:d1:f0:6a:f4:00:80:89:51:43:ae:
a8:0f:b4:ec:15:9e:74:25:a5:1a:10:93:5c:16:35:dd:4e:b9:
6e:0f:c7:f8:e2:78:bc:76:3a:4d:e7:ad:d7:e5:15:6b:cd:43:
4f:4a:dc:a6:c8:2b:45:eb:ec:a9:93:9d:ae:d7:df:03:1b:b6:
00:7d:9f:17:0a:72:54:27:7b:8a:a4:9a:e4:53:d5:d8:f3:ea:
45:d6:82:e0:6b:29:6f:a9:2b:6b:f5:c4:43:cb:57:35:08:6f:
51:64:aa:10:89:6b:aa:3a:e2:cc:77:22:e0:73:3c:76:2b:b9:
04:d3:0c:1a:29:0d:68:00:eb:f1:c7:e8:89:64:17:79:05:1c:
0d:82:68:b5:1d:eb:af:90:87:9d:63:80:ba:e6:7a:61:38:8d:
94:f6:e0:5f:94:cb:47:5e:58:3b:13:bd:fa:a0:1f:ec:32:9c:
55:f5:2c:3d:7d:5b:a9:94:8e:a1:54:3e:45:89:c4:9b:62:d6:
14:df:7a:1b:ca:a5:6f:d7:a9:4b:9b:d6:d0:59:4a:e1:3d:39:
8c:0c:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:51:35 2024 by rpki-client on console-ams.rpki-client.org