Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
File: YYQdHtq_n_D2AYxhEBevcZYnok0.cer (raw, json)
Hash identifier: IY3nd367/UQ0hazPY/J8TzF4/nmYmH0lVgSRnCM8ej0=
Subject key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021AB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Nov 2024 12:29:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 152100
IP: 103.101.84.0/22
IP: 2401:cd40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 18:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137905 (0x21ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 11 12:29:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:a6:b4:c0:37:bc:fc:de:c4:78:be:b0:e9:
2f:d2:2a:b4:1f:5b:67:47:73:05:5c:1c:31:54:6f:
2a:83:56:a5:9d:7f:ba:4e:f1:8a:4c:0d:d6:4d:ac:
c3:63:50:6b:8a:f1:d5:4c:62:e4:72:83:b5:31:27:
c8:f7:25:ca:98:a1:08:f1:39:cd:df:13:29:cc:9e:
31:87:0e:8c:4b:59:fb:ef:92:73:c3:e1:99:02:ab:
c2:1f:bf:22:3f:c3:9e:1d:c2:f0:af:ca:ef:7f:fb:
d0:f5:2a:a1:60:3c:94:58:e5:d8:3b:83:13:8f:1a:
f7:9a:fb:92:6e:e7:d4:94:18:38:fd:37:4a:ea:da:
7d:7f:65:bc:f7:1f:4d:9b:da:14:e8:95:5a:30:51:
21:0a:44:b3:24:68:d0:57:1c:0c:bf:d2:cc:b0:61:
8b:92:f0:71:64:7e:82:17:06:8c:96:5c:0a:3d:88:
ab:9f:75:a7:38:91:48:89:71:5b:78:f3:07:d6:6b:
a7:62:1f:d2:3c:96:13:6d:59:a9:49:e2:8c:08:2d:
84:28:b1:5f:b4:f5:1b:f5:78:39:2a:02:0e:3d:3f:
12:39:ad:f8:37:ae:c5:79:fe:72:82:c9:e9:94:38:
92:c1:e8:f1:cc:46:65:41:e4:cb:07:54:d2:a2:18:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152100
sbgp-ipAddrBlock: critical
IPv4:
103.101.84.0/22
IPv6:
2401:cd40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:cf:b8:6b:2d:b3:e7:3d:d1:f6:7a:ca:61:e6:4d:10:13:ec:
98:76:b5:79:3a:7e:ac:09:d3:69:b4:88:63:c9:dd:c2:e8:74:
25:49:75:90:84:7c:b8:ac:b2:63:9d:62:96:eb:44:a2:e5:e2:
dc:b5:a8:42:1b:05:51:f2:11:b0:1d:2e:c2:ae:c3:0d:23:97:
f9:e5:bd:27:4c:ed:89:51:02:9b:f9:6c:a4:fd:29:2b:99:cb:
0c:c0:30:2b:56:46:39:f1:c6:74:42:37:b9:ff:d7:fe:79:2a:
f1:c1:e3:62:e2:b2:73:13:2b:63:48:32:6b:b2:04:c6:6f:a1:
80:54:15:d7:24:fc:0e:74:e0:3e:67:36:5e:e2:9c:d2:32:90:
65:67:3f:2f:e4:17:8d:5a:45:4c:93:28:c5:7c:37:07:e4:77:
bc:ae:01:a4:85:61:bd:c9:3a:da:c8:61:1d:ab:44:9a:09:f4:
c9:62:2e:aa:6d:56:17:95:9f:c7:75:59:6a:94:7f:bf:be:df:
e5:1b:44:cf:af:65:f6:5e:39:94:c7:38:59:f3:05:3f:f5:db:
b1:b2:1a:6c:56:66:98:c7:c5:a6:2e:42:81:3d:cd:93:09:59:
5f:46:3d:69:e6:ee:ad:b0:7f:e3:89:77:87:56:a7:62:3f:96:
4c:f2:63:c4
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAhqxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTExMTEyMjkxN1oXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2
MTEwMTdBRjcxOTYyN0EyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfkaa0wDe8/N7EeL6w6S/SKrQfW2dHcwVcHDFUbyqDVqWdf7pO8YpMDdZNrMNj
UGuK8dVMYuRyg7UxJ8j3JcqYoQjxOc3fEynMnjGHDoxLWfvvknPD4ZkCq8IfvyI/
w54dwvCvyu9/+9D1KqFgPJRY5dg7gxOPGvea+5Ju59SUGDj9N0rq2n1/Zbz3H02b
2hTolVowUSEKRLMkaNBXHAy/0sywYYuS8HFkfoIXBoyWXAo9iKufdac4kUiJcVt4
8wfWa6diH9I8lhNtWalJ4owILYQosV+09Rv1eDkqAg49PxI5rfg3rsV5/nKCyemU
OJLB6PHMRmVB5MsHVNKiGB4zAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUYYQdHtq/
n/D2AYxhEBevcZYnok0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3MzczL0JGQTlDMzYyMjNBQTExRUNBODExNkIyN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNzM3My9CRkE5QzM2MjIzQUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRx
X25fRDJBWXhoRUJldmNaWW5vazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlIkMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2VUMA0EAgAC
MAcDBQAkAc1AMA0GCSqGSIb3DQEBCwUAA4IBAQAKz7hrLbPnPdH2esph5k0QE+yY
drV5On6sCdNptIhjyd3C6HQlSXWQhHy4rLJjnWKW60Si5eLctahCGwVR8hGwHS7C
rsMNI5f55b0nTO2JUQKb+Wyk/SkrmcsMwDArVkY58cZ0Qje5/9f+eSrxweNi4rJz
EytjSDJrsgTGb6GAVBXXJPwOdOA+ZzZe4pzSMpBlZz8v5BeNWkVMkyjFfDcH5He8
rgGkhWG9yTrayGEdq0SaCfTJYi6qbVYXlZ/HdVlqlH+/vt/lG0TPr2X2XjmUxzhZ
8wU/9duxshpsVmaYx8WmLkKBPc2TCVlfRj1p5u6tsH/jiXeHVqdiP5ZM8mPE
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:34 2024 by rpki-client on console-fra.rpki-client.org