Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer
File: Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer (raw, json)
Hash identifier: YVVU4BJl5Ip4cNx3vwKngfKJ3fTONypMWrpygx93AlE=
Subject key identifier: 67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A17C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 May 2023 17:08:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 136440
IP: 103.88.28.0/22
IP: 2400:dc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106876 (0x1a17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 4 17:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:ae:f6:22:7b:d5:a5:f8:95:ce:22:04:68:
4e:42:7b:d0:17:f2:4c:f1:26:10:68:70:03:22:c7:
ab:a8:fb:eb:30:ac:8b:fc:41:bc:a4:61:78:90:a9:
bb:1d:c9:02:8e:32:fa:56:ab:b2:eb:b2:18:66:0f:
77:17:73:32:cd:08:4f:4e:6e:50:be:86:da:ca:e6:
b5:3c:bf:de:fb:a4:d0:9e:c2:81:73:82:ee:25:e2:
d9:41:9f:48:e7:52:11:41:2a:51:58:9c:ff:59:43:
3a:ff:4f:fb:cc:e4:3e:d1:51:dc:39:7f:a0:ee:22:
aa:3a:9d:6c:78:e5:09:a7:28:47:c7:e0:dc:b6:64:
6d:43:aa:71:08:4d:69:28:29:64:50:e6:d4:70:d0:
cd:15:38:1c:93:b2:31:61:a3:07:b3:1c:f0:d1:49:
c9:96:14:d8:ee:26:5f:3a:3b:5b:4b:b7:0a:0b:10:
08:9b:fb:43:c3:4c:90:6b:ca:81:5f:64:0f:8a:ec:
7b:0f:ef:0a:47:08:fb:d9:65:d0:8c:b6:4a:7c:ce:
f0:af:94:e6:6b:14:f1:d4:83:4d:74:63:fc:23:b0:
f3:85:0b:41:d9:e9:f9:bb:bc:06:c3:bc:3d:b6:f2:
62:74:64:f7:0c:91:b8:c2:c5:e7:51:97:ae:34:97:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136440
sbgp-ipAddrBlock: critical
IPv4:
103.88.28.0/22
IPv6:
2400:dc40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:0f:cc:83:4d:d7:12:96:a3:83:18:7b:e4:60:04:2e:69:9c:
e1:1d:5b:b6:ff:bf:ae:55:34:7f:ff:ea:1a:7b:4e:a3:43:3f:
3a:01:79:de:08:27:b3:cc:33:86:02:5c:04:3e:ce:f1:d1:29:
2e:35:b4:3b:8c:76:ae:3f:d1:48:b8:36:65:37:c2:c7:64:72:
aa:cd:f3:a2:89:b9:67:76:a6:13:60:37:f8:83:19:17:10:e0:
58:e8:e3:e2:36:96:65:9f:ec:43:41:a4:13:e6:98:f3:fe:3d:
fb:a2:90:fc:51:b6:eb:37:9b:46:6f:a5:1c:bc:1e:e8:6c:97:
50:c3:6b:0b:5f:62:56:38:4b:a5:bc:e7:8f:2d:e1:48:77:64:
3c:50:43:50:d3:43:95:ea:31:cc:4e:d7:3c:5b:7c:a6:03:5a:
0c:29:1e:54:f6:5a:7e:ef:e4:42:61:26:38:02:84:98:2b:e1:
41:9d:aa:a8:50:44:c7:97:ea:3a:ff:9f:db:16:ce:62:04:12:
6e:8c:86:2a:8b:f5:f3:98:2e:bc:c8:f0:18:6c:58:d9:0c:30:
8a:c1:76:4a:4b:fd:7c:71:ab:ee:e3:71:cb:cc:1e:73:69:b0:
f4:81:0a:28:f8:8d:80:7c:12:e0:69:4a:4c:a2:9f:69:5b:4d:
09:ae:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:27 2024 by rpki-client on console-fra.rpki-client.org