Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.cer (raw, json)
Hash identifier: 0WmO6lBARcxNKP+qP1lPOlCVGfdRbeMXbBUTQKq9Q3M=
Subject key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C4FF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Oct 2023 12:30:46 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 151981
IP: 103.67.66.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 04:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115967 (0x1c4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 19 12:30:46 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:3a:0a:2d:e6:85:06:0e:4a:3a:d7:64:fe:
05:1b:7d:4d:6b:7c:f4:eb:51:a4:60:6f:c8:f1:20:
2c:37:41:1c:d9:5c:55:e1:a6:d6:46:81:00:3d:fd:
2e:ef:d8:b4:05:99:e6:fb:62:ed:96:35:27:9f:45:
fe:e2:4b:85:79:37:b0:b7:91:47:1a:2a:59:cd:e1:
2e:64:ff:27:ce:ef:1c:d0:36:3f:4d:b4:7a:2c:c6:
61:08:d1:b4:7a:b0:df:4f:0a:55:4c:11:3c:10:f3:
c2:ab:93:7b:01:bf:67:86:25:43:c8:33:98:b3:08:
71:b9:c6:0c:b3:f1:09:8b:b2:84:a7:54:dd:2b:90:
68:88:ac:dc:25:21:6e:43:dd:bd:22:41:9e:c3:4f:
08:47:75:5f:51:78:42:cf:6b:a2:92:e6:15:2d:a3:
e4:72:1a:17:b9:b5:6f:1d:d3:fb:f6:46:15:73:d2:
35:d5:d7:a3:98:6e:60:17:f8:7e:54:21:22:4d:0e:
86:e3:f1:35:5b:d2:0e:13:06:14:69:f6:39:94:ee:
21:8a:17:96:ba:03:1d:8d:24:de:2a:db:40:4e:68:
8b:3f:90:3b:f2:7f:08:05:e7:e7:0b:46:f9:75:f6:
7a:ba:c4:08:10:e5:25:5f:57:38:96:f3:b8:6f:2f:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151981
sbgp-ipAddrBlock: critical
IPv4:
103.67.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:3f:67:e2:43:f1:15:a4:bb:d5:49:4b:2b:9e:25:fd:7f:50:
dd:04:3a:46:ef:1d:30:61:4d:3b:45:34:81:2f:eb:42:fe:f5:
35:dc:8e:1b:2d:a8:09:e5:36:72:3e:81:30:d6:81:c5:65:41:
e6:be:c7:9f:ed:ce:48:23:54:2a:e1:51:fe:96:f2:07:0b:36:
70:c3:c9:5c:85:50:86:d8:e4:ac:c1:de:26:e4:f3:df:ca:8a:
49:a1:1c:b4:3e:7a:f4:1a:0c:1f:c8:1d:93:00:15:67:af:54:
1a:fe:21:89:c5:08:21:e2:52:88:cd:6d:d5:18:15:f5:57:0a:
d1:2a:98:18:01:d8:26:e0:ed:cc:39:ef:3f:89:f1:48:35:9b:
1a:2c:93:70:1a:ce:f8:9d:11:24:b0:8c:bb:0a:05:c9:8f:b8:
90:d6:1b:40:b8:c7:6e:15:ad:d9:e3:5c:c6:79:ef:35:61:83:
d2:c0:33:d9:97:e8:4d:d5:84:be:19:d6:fc:42:a8:54:19:d3:
a8:8c:48:1b:8a:eb:59:6f:dc:80:48:67:5e:af:71:69:17:94:
a2:30:15:3d:b0:95:5a:5a:eb:d3:f4:fa:1b:4a:f2:79:78:bd:
44:87:e1:cc:af:1a:91:04:31:da:8e:83:6e:cb:5d:f4:c5:3b:
2d:4e:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:28:01 2024 by rpki-client on console-fra.rpki-client.org