Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer (raw, json)
Hash identifier: NiEIL42s2YhfzBawVDo+E6tAMf1r3M80ZQCzUCR8asE=
Subject key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E06E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Feb 2024 16:09:28 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 23898
AS: 137439
IP: 103.108.216.0/23
IP: 2001:df4:1d00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122990 (0x1e06e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 23 16:09:28 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:be:94:b0:2b:bf:d6:f3:71:3d:69:83:0e:
0e:42:a0:93:82:e5:39:7c:02:84:a4:95:a8:d5:af:
64:cf:99:5b:9a:17:81:2d:38:40:85:a7:ef:d0:f3:
3e:9d:12:a0:a0:df:5f:ab:fc:33:61:0c:9c:d2:b9:
43:d3:e0:0d:99:fa:c9:c6:99:1b:f0:ea:f9:a7:0b:
42:67:04:cd:d5:0c:13:70:2d:21:9b:89:4c:db:99:
01:47:75:05:9f:d4:84:26:93:58:12:6c:6c:d1:7a:
95:4e:60:58:49:d5:24:2f:d0:24:de:26:08:19:fd:
19:c7:8b:29:13:fd:96:a6:0b:57:be:52:33:37:87:
c2:89:3a:e5:e4:60:db:50:7a:2d:40:b6:18:62:30:
d3:22:10:8d:28:47:6f:f9:86:fb:ad:eb:d5:82:4c:
38:06:39:b2:bd:31:d8:6a:7e:5a:e0:9f:e3:f5:e2:
cb:1e:26:8b:67:30:04:f4:75:d9:97:7f:e1:eb:0b:
9d:96:56:07:49:9c:93:fb:55:68:28:88:ea:94:a1:
43:0b:9d:df:f0:f2:12:b6:92:a2:c1:12:b1:16:e9:
2a:87:ef:92:b9:0e:a3:1a:16:e9:c0:05:54:cb:43:
73:67:f7:5d:c5:2a:12:a3:65:7b:4e:34:5d:9b:b6:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23898
137439
sbgp-ipAddrBlock: critical
IPv4:
103.108.216.0/23
IPv6:
2001:df4:1d00::/48
Signature Algorithm: sha256WithRSAEncryption
6c:bf:62:7e:74:24:78:af:df:bd:49:32:ef:aa:1a:60:d7:0a:
28:f9:e4:2e:e0:0a:ab:05:f4:85:a8:cd:6b:3f:8c:b6:ef:82:
b9:03:84:5d:98:3e:c4:09:72:2e:1d:a1:8a:d5:1b:14:31:54:
05:8a:b4:0c:37:1f:b3:9e:c2:d7:7a:da:a1:4e:9c:f4:ce:e1:
52:c0:f1:fd:e9:d8:cd:5a:d0:5d:1f:7b:00:91:42:9a:32:05:
e1:63:90:1f:65:ae:56:73:39:f7:6a:c9:b9:c2:ee:4e:84:56:
47:91:e5:31:8e:88:c6:ba:eb:9a:68:a4:2f:82:d6:37:a8:fb:
64:42:ae:97:e2:1a:ea:53:9d:c4:75:7d:28:cc:33:3e:10:75:
f8:d1:69:75:c1:1a:68:95:ef:df:ed:e0:9d:66:c5:b7:77:5d:
22:97:4d:1c:5f:f3:09:50:89:16:ee:cb:44:f4:f1:2e:96:8f:
a6:2f:63:2b:84:c1:c4:a6:52:5c:7a:27:84:f1:17:67:8a:b8:
23:1a:4c:be:df:f4:ea:6a:e8:ce:71:0a:24:62:c8:b5:b9:5c:
59:39:62:d3:82:76:bc:b9:bf:e7:00:c3:d2:6f:04:43:25:a7:
77:df:b4:5e:92:ab:82:69:3a:79:db:36:3c:c5:6c:bf:18:65:
a4:57:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:56 2024 by rpki-client on console-fra.rpki-client.org