Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
File: Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer (raw, json)
Hash identifier: PfmsnBa5/sohUUOEaz3zEFqr+wBgPTZvUHu0bP7iJv0=
Subject key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02135E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 12:44:57 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151977
IP: 103.67.60.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136030 (0x2135e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 12:44:57 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:ae:6a:8d:7d:a9:e2:b3:56:e8:cc:27:24:
6c:10:42:05:da:54:17:d6:32:3f:e1:d0:2f:2b:6a:
15:9c:33:a5:e7:85:80:84:ea:ee:f5:aa:f0:78:b1:
90:de:6c:71:cf:7b:25:e3:6e:9f:51:0e:27:b3:21:
cd:6c:81:c7:2a:fc:dd:40:78:e2:6a:af:42:d9:14:
52:8f:af:6e:da:d5:35:92:d5:16:4b:8f:6a:35:c2:
0c:7f:3e:e9:77:22:49:af:99:84:18:5d:86:d7:db:
1d:ca:fa:13:28:73:72:46:21:36:a3:2f:b6:24:ce:
63:6c:15:c6:53:89:1f:c2:17:68:3d:24:11:f4:e9:
5a:f7:31:0a:1e:be:88:ec:ce:9d:0e:42:32:db:69:
e5:61:da:c2:ea:2e:d6:1c:5d:f9:9c:c9:5a:86:f0:
1b:d3:60:a2:94:e0:26:18:32:28:93:5e:f3:ae:70:
4d:45:93:ce:ea:ee:6a:67:80:24:10:f5:3e:65:ae:
ad:76:fb:9c:d4:ef:11:69:0f:66:ee:7b:f6:a3:6a:
71:3e:7d:67:bb:72:45:00:9e:45:ef:2e:81:1a:83:
cc:d9:cb:69:5c:63:0a:7c:07:2b:56:d6:96:b1:e8:
89:fc:95:14:05:b1:37:5a:a7:ef:46:25:dc:53:d6:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151977
sbgp-ipAddrBlock: critical
IPv4:
103.67.60.0/23
Signature Algorithm: sha256WithRSAEncryption
02:69:07:36:f5:17:cc:a2:81:e6:ad:0b:c1:6d:fd:7f:05:73:
bd:83:40:c5:30:5f:fa:c1:4d:5a:8f:a1:ca:ac:bf:a5:87:77:
ed:5e:69:ab:16:6e:49:2e:98:bd:70:11:7f:81:bd:91:0c:24:
1a:5b:ee:3b:0a:83:b4:30:27:da:56:29:13:ed:79:9a:27:93:
7c:74:ec:bc:00:00:e2:50:c8:e0:c4:7e:9b:e8:71:4c:d2:12:
a6:9f:af:55:c8:a9:77:a7:77:4c:3f:dc:51:4f:33:cd:00:0f:
4f:a7:a7:83:51:39:17:49:df:ae:28:80:e6:cc:ec:0f:2e:1a:
10:da:6b:6e:17:04:47:30:07:09:17:5f:6e:40:b9:88:58:af:
7c:d6:5b:37:ca:04:bb:ed:51:12:ea:20:f0:db:76:f8:fb:c2:
2e:82:a6:54:26:39:6a:fc:ea:4b:80:0b:18:7b:71:65:32:3d:
5d:5f:93:30:da:54:25:29:85:42:01:4a:17:f4:4d:e6:cd:d4:
e8:db:88:8f:65:cf:72:bc:c2:08:37:45:03:80:f4:ca:6e:1d:
e3:a7:09:6a:1e:8b:2d:77:8e:13:89:5f:47:6d:63:72:53:44:
54:ec:65:be:4c:ca:22:71:d4:98:c6:37:d8:48:c4:bb:58:e7:
c0:98:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:46 2024 by rpki-client on console-ams.rpki-client.org