Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.cer (raw, json)
Hash identifier: ITUmnM0ykGi+y3KwGjX+QZvzfUdtofv7fTJ3dwN2y7E=
Subject key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 20:50:44 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151981
IP: 103.67.66.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138119 (0x21b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 14 20:50:44 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:3a:0a:2d:e6:85:06:0e:4a:3a:d7:64:fe:
05:1b:7d:4d:6b:7c:f4:eb:51:a4:60:6f:c8:f1:20:
2c:37:41:1c:d9:5c:55:e1:a6:d6:46:81:00:3d:fd:
2e:ef:d8:b4:05:99:e6:fb:62:ed:96:35:27:9f:45:
fe:e2:4b:85:79:37:b0:b7:91:47:1a:2a:59:cd:e1:
2e:64:ff:27:ce:ef:1c:d0:36:3f:4d:b4:7a:2c:c6:
61:08:d1:b4:7a:b0:df:4f:0a:55:4c:11:3c:10:f3:
c2:ab:93:7b:01:bf:67:86:25:43:c8:33:98:b3:08:
71:b9:c6:0c:b3:f1:09:8b:b2:84:a7:54:dd:2b:90:
68:88:ac:dc:25:21:6e:43:dd:bd:22:41:9e:c3:4f:
08:47:75:5f:51:78:42:cf:6b:a2:92:e6:15:2d:a3:
e4:72:1a:17:b9:b5:6f:1d:d3:fb:f6:46:15:73:d2:
35:d5:d7:a3:98:6e:60:17:f8:7e:54:21:22:4d:0e:
86:e3:f1:35:5b:d2:0e:13:06:14:69:f6:39:94:ee:
21:8a:17:96:ba:03:1d:8d:24:de:2a:db:40:4e:68:
8b:3f:90:3b:f2:7f:08:05:e7:e7:0b:46:f9:75:f6:
7a:ba:c4:08:10:e5:25:5f:57:38:96:f3:b8:6f:2f:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151981
sbgp-ipAddrBlock: critical
IPv4:
103.67.66.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:a2:7e:fa:ff:a9:c3:f5:de:ca:7f:ed:47:75:85:fe:07:fa:
81:3e:81:33:0a:4c:86:fd:74:fa:46:31:3a:78:50:85:c5:9b:
34:2a:83:84:1b:2f:e0:b2:de:3c:c8:a9:1e:4b:22:37:2f:47:
22:26:7c:e1:6c:1b:40:4b:a0:fb:43:f4:0d:65:a4:97:9c:0b:
89:7e:ce:f5:2f:42:4b:57:f0:6e:36:fe:a5:dd:ce:86:f6:dd:
20:4c:31:be:17:fb:7e:18:05:0a:ef:1b:3f:d4:97:e2:69:1d:
cf:7f:ca:5d:0b:dd:cd:ff:d5:07:98:99:ed:68:ee:e9:04:9d:
03:bb:1c:85:4f:5d:31:00:2f:f8:6e:38:a5:6b:79:9b:da:38:
85:d8:f9:ca:ea:97:d7:73:cd:dd:37:41:15:75:de:35:f9:2f:
c9:06:bd:b5:98:38:e9:dc:3b:e1:b9:a1:47:e0:33:ef:86:4f:
93:7a:54:f4:5e:34:94:13:40:e7:93:bb:c0:4c:63:13:e7:5b:
a3:aa:a2:8b:f6:16:ee:5e:08:ad:d9:4f:f2:99:dc:3d:01:84:
0a:93:0b:8b:94:4b:d4:b2:fb:31:a1:89:8f:93:62:66:f7:74:
ef:89:b0:7b:01:25:9d:21:26:01:ee:42:8a:1a:b3:b9:26:ae:
e0:d4:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:38 2024 by rpki-client on console-fra.rpki-client.org