Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer (raw, json)
Hash identifier: G7cM4xzXG/s5gqWNgyecjskI43VzsfremkcM+dtmE00=
Subject key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BD78
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Sep 2023 06:42:27 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151809
IP: 103.218.136.0/23
IP: 2001:df2:ee40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 03:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114040 (0x1bd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 14 06:42:27 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:fa:bf:7a:8a:cf:e3:59:65:44:ac:f3:ec:
c0:00:ba:c6:4c:4d:e3:bb:af:66:b1:e7:65:7a:cd:
05:b7:4e:ed:1e:d4:83:5b:38:de:4f:84:ad:11:37:
b1:f1:d4:8b:91:90:7f:e8:db:20:1e:8a:02:23:ca:
f5:a5:8d:33:0b:94:e3:15:bc:a4:4f:7c:46:3d:01:
b3:7f:a8:39:53:83:8b:2d:26:04:0a:fd:1f:f7:35:
9b:fc:2c:4a:7b:e1:88:d4:65:f6:89:c5:8c:1e:26:
5f:47:f3:50:79:80:cd:1d:97:45:d7:94:e1:a4:e9:
f1:a7:ff:bf:24:df:f2:cb:d8:22:7d:06:b3:eb:59:
ce:41:75:e8:5e:9e:2f:a8:67:1a:51:92:e6:5f:5f:
f2:77:4c:71:4a:69:ed:d2:2b:de:41:5f:ef:a5:cc:
c3:f3:d8:72:41:42:b8:1a:a4:1a:19:0f:75:66:16:
40:11:5a:19:24:81:ef:fc:ff:c0:77:7a:6c:c8:9b:
b8:ac:33:e7:27:0a:84:cf:f3:65:57:25:17:c1:a1:
12:34:9c:4f:0d:24:f4:ab:b5:89:19:1b:3b:19:b7:
24:29:07:cb:ab:83:a8:18:70:8d:76:8e:bd:f9:32:
d7:59:e3:1a:c8:0b:87:d4:43:7c:d9:d5:b9:ed:be:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151809
sbgp-ipAddrBlock: critical
IPv4:
103.218.136.0/23
IPv6:
2001:df2:ee40::/48
Signature Algorithm: sha256WithRSAEncryption
ba:62:76:2e:81:27:63:91:da:b8:a8:69:58:b8:75:15:25:ff:
25:01:41:38:d0:1a:72:76:0f:00:0d:58:dc:2b:16:df:25:e4:
bf:e7:71:bd:f2:2b:ae:6b:96:6e:49:53:14:43:1a:20:f8:b3:
e0:7c:98:cf:e2:f6:57:4c:aa:b1:fe:af:19:b8:43:8f:29:0c:
10:f8:d9:12:61:ef:fe:83:b3:82:42:d5:c8:39:30:56:24:5c:
20:20:65:c9:81:38:01:42:ef:81:a2:7a:07:b3:65:05:5c:1b:
b0:14:2e:47:64:b5:7f:19:15:91:f5:90:27:e5:d0:79:83:08:
56:0f:45:44:4c:c1:02:ce:ad:0e:d1:38:61:17:3c:02:c9:44:
90:e6:41:db:e7:3b:9b:a9:a1:8a:f9:de:a8:87:51:e8:2c:32:
08:a2:1c:33:6a:25:69:60:ae:52:50:75:56:3c:34:26:ed:60:
1b:42:ab:ba:f9:94:91:36:2b:2e:5e:ff:f5:f5:42:b6:75:4f:
ba:a0:1c:9f:be:e4:30:61:e2:20:46:b1:6a:b0:5a:17:55:b5:
4d:6d:ba:ac:a0:d0:8c:76:14:12:e6:6f:d7:b5:c4:f6:8c:6e:
f6:1a:27:81:70:7b:fc:f0:84:6f:ea:5a:82:4b:a1:1b:26:b9:
9e:6a:fd:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 04:05:09 2024 by rpki-client on console-fra.rpki-client.org