Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
File: _x_VyU8S81-tE63yeZqJj94Gysk.cer (raw, json)
Hash identifier: tcOEZjoWPXSuCHSAzisDhpG2jgxaTBEvIAFnWLm6PmY=
Subject key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021938
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 16:53:09 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 103.36.12.0/23
IP: 2402:ec00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137528 (0x21938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 16:53:09 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:7f:81:a8:10:92:e1:80:0a:df:eb:05:95:
c3:bb:f6:b5:f3:98:ff:94:3c:39:e3:6b:ba:12:db:
fa:27:80:3f:97:01:ea:33:06:57:b5:86:3d:08:55:
f6:07:ef:40:a8:6a:cb:b4:71:36:cd:b7:d4:c3:ba:
1d:7a:e3:0e:10:6b:31:60:41:e9:61:0d:9a:08:a8:
6b:6f:ae:45:01:17:85:57:51:6b:02:f8:88:02:11:
ac:bb:aa:16:4c:3e:ed:2e:20:b0:81:86:d0:25:05:
df:44:e7:08:7e:82:32:ba:f4:e6:7b:de:6c:96:a9:
0f:85:66:c4:46:cd:9f:29:ca:a2:a4:d7:cb:b8:4a:
6d:41:6b:40:0c:9b:ba:d6:aa:32:35:dc:29:ba:5c:
79:74:a5:6c:80:17:95:c6:f1:ed:84:3c:89:3b:2a:
d4:fb:c3:64:99:64:32:fd:ab:f5:77:61:fa:27:ef:
98:be:a6:1a:00:ce:8c:4b:43:81:fa:4e:84:df:0a:
21:3f:3b:c8:4d:e9:8b:68:e6:3b:4d:37:bb:cb:60:
c4:67:10:d9:fa:dc:e3:b4:6b:c6:c6:e4:26:e2:ae:
ea:d3:23:7f:f6:de:bf:73:f1:f2:66:fa:e4:f0:4b:
36:00:4f:12:f8:89:ba:8c:98:62:f5:7c:86:db:2a:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.12.0/23
IPv6:
2402:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:58:a8:01:85:a0:5f:f1:96:e7:be:62:68:9b:e1:e8:53:22:
52:54:c3:7f:fb:75:6d:c3:2b:71:e9:f0:99:86:d4:7f:f4:25:
07:d2:ac:52:04:38:62:33:ce:03:a8:5b:82:c6:55:8b:4b:62:
68:c6:33:f1:a7:77:f0:73:07:32:b9:7b:14:c8:10:a7:5c:47:
0b:58:1f:a3:b4:d9:3e:a8:d4:d8:e6:93:f6:c7:18:90:19:18:
ce:3a:8d:1b:02:96:4e:f0:ee:e4:71:df:7f:86:b3:af:b9:0d:
29:70:ac:18:44:f7:de:35:f0:05:c5:e3:58:09:c7:66:93:5b:
9c:68:c0:c6:23:3a:67:c1:a6:49:b3:c7:35:56:2e:46:38:3f:
3c:df:c8:e1:c8:41:12:67:e7:d4:d2:ee:04:c8:ba:1f:68:59:
a7:9c:0a:9f:29:e0:42:ab:70:b5:a8:2e:d7:5b:10:4e:09:f6:
88:e6:c2:c0:58:89:3e:62:cf:34:9f:07:13:97:80:64:fe:b8:
6f:be:d8:81:30:fd:24:73:bc:56:2a:73:9d:4b:52:c3:60:71:
7b:5a:8d:87:3c:1a:f4:06:53:69:13:99:d7:1d:6a:2a:ea:1c:
23:1e:e5:3c:e7:c0:91:8b:4f:e6:0e:77:4b:8c:d6:61:cc:d7:
76:ac:f9:ea
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAhk4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNTE2NTMwOVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTA0RDYxMTAvBgNVBAUTKEZGMUZENUM5NEYxMkYzNUZBRDEzQURG
Mjc5OUE4OThGREUwNkNBQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwzn+BqBCS4YAK3+sFlcO79rXzmP+UPDnja7oS2/ongD+XAeozBle1hj0IVfYH
70Coasu0cTbNt9TDuh164w4QazFgQelhDZoIqGtvrkUBF4VXUWsC+IgCEay7qhZM
Pu0uILCBhtAlBd9E5wh+gjK69OZ73myWqQ+FZsRGzZ8pyqKk18u4Sm1Ba0AMm7rW
qjI13Cm6XHl0pWyAF5XG8e2EPIk7KtT7w2SZZDL9q/V3Yfon75i+phoAzoxLQ4H6
ToTfCiE/O8hN6Yto5jtNN7vLYMRnENn63OO0a8bG5CbirurTI3/23r9z8fJm+uTw
SzYATxL4ibqMmGL1fIbbKnwPAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU/x/VyU8S
81+tE63yeZqJj94GyskwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUwNEQ2L0I2QzA5MzRDMzFBOTExRUZCNkZCMUQ2MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MDRENi9CNkMwOTM0QzMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi9feF9WeVU4
UzgxLXRFNjN5ZVpxSmo5NEd5c2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnJAwwDQQCAAIwBwMFACQC7AAwDQYJKoZIhvcNAQELBQADggEB
AE9YqAGFoF/xlue+Ymib4ehTIlJUw3/7dW3DK3Hp8JmG1H/0JQfSrFIEOGIzzgOo
W4LGVYtLYmjGM/Gnd/BzBzK5exTIEKdcRwtYH6O02T6o1Njmk/bHGJAZGM46jRsC
lk7w7uRx33+Gs6+5DSlwrBhE99418AXF41gJx2aTW5xowMYjOmfBpkmzxzVWLkY4
PzzfyOHIQRJn59TS7gTIuh9oWaecCp8p4EKrcLWoLtdbEE4J9ojmwsBYiT5izzSf
BxOXgGT+uG++2IEw/SRzvFYqc51LUsNgcXtajYc8GvQGU2kTmdcdairqHCMe5Tzn
wJGLT+YOd0uM1mHM13as+eo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:33 2024 by rpki-client on console-ams.rpki-client.org