Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.cer (raw, json)
Hash identifier: EF0rrSWJ9zVCeR6xmcnDsmcwl/ipnsI6ISgvPofywjA=
Subject key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A5A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 28 May 2023 17:39:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 141774
IP: 103.163.222.0/23
IP: 2407:2fc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107940 (0x1a5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 17:39:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:8d:4b:ad:57:97:2f:41:d1:28:83:33:56:
56:64:c5:8f:35:5d:6f:d3:5b:95:b9:d9:c8:61:b9:
cd:5b:0f:5f:36:52:46:54:7e:4f:bb:19:24:2c:fb:
17:98:7f:03:24:8d:7b:41:8d:64:e1:6f:5a:f4:3a:
c0:72:ab:17:51:ac:04:e9:d1:77:3c:f8:0c:95:09:
ef:65:97:62:e0:7d:ac:30:95:33:ba:fa:23:eb:70:
e9:b4:0a:8c:e7:87:21:9e:1d:a0:2b:7a:bb:41:5f:
ff:80:20:be:d0:97:4e:dc:99:14:17:45:eb:11:98:
72:8a:ba:a9:52:e9:96:19:bd:35:c2:d1:30:c8:2d:
44:58:14:2d:eb:47:8f:1c:f3:a6:47:1f:b0:a9:58:
25:0f:4e:c3:8e:79:9a:a1:47:5d:a0:d6:ca:6b:cd:
d4:08:04:d1:e3:cb:04:9f:3b:fd:42:cf:d4:e8:56:
30:c0:e3:e5:93:76:4e:9a:25:ac:cf:b7:bd:01:91:
76:c9:b9:5d:ee:fb:d3:e3:86:95:f1:12:05:6a:c3:
48:f8:00:9d:32:b8:64:c6:74:3d:5e:26:fd:dd:7e:
2e:77:d1:51:93:ea:a7:44:05:42:4d:51:41:a6:4c:
ff:fa:cf:52:40:63:8c:3c:9d:37:4f:92:93:23:4b:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141774
sbgp-ipAddrBlock: critical
IPv4:
103.163.222.0/23
IPv6:
2407:2fc0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:47:f6:00:c7:0a:e0:84:f2:cc:f1:22:17:3f:6a:29:16:bd:
a5:65:2d:16:c7:02:e6:da:12:f3:ce:3e:fb:be:9e:e0:0c:0b:
95:75:3d:1a:c6:63:0b:67:25:34:0c:70:55:87:fd:07:1f:87:
5a:e3:4f:81:62:c4:57:2a:28:99:a2:4b:58:76:90:cb:9a:09:
92:7f:5b:a7:c3:c4:9c:2c:46:1f:77:ff:0f:77:cf:80:2b:c6:
fd:4a:cd:2d:bf:75:7c:74:17:80:ac:8d:21:0f:19:6c:4d:fc:
78:52:8e:e4:a7:95:b7:ff:6d:d7:2c:78:b4:99:4c:6e:6e:17:
0d:cb:3e:7c:ef:bb:0b:e2:88:65:bf:4b:be:c3:8c:80:0c:bf:
6a:b7:03:7c:fd:43:83:fd:ea:d5:34:be:e7:84:ea:72:0f:9a:
3f:05:2f:6e:a8:b3:49:9d:df:01:89:36:09:b4:c5:42:04:13:
cb:53:e7:fd:1d:32:b7:87:e4:08:3b:29:3f:2d:28:24:3a:9c:
21:5d:02:6b:ba:d3:ce:53:0c:35:61:2f:30:77:02:90:ef:f2:
d8:05:c8:c9:25:51:f8:45:04:e7:65:71:c6:c3:01:45:85:9b:
29:36:47:27:fb:f0:48:ce:e7:88:83:42:16:36:5a:56:15:0a:
35:71:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:27 2024 by rpki-client on console-fra.rpki-client.org