Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.cer (raw, json)
Hash identifier: sVXRLJMcOoamnqSAk4Vw6pq7yHQr+dW3uLNNZZMWy2o=
Subject key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C607
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 15:37:31 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 23729
AS: 132684
IP: 103.100.92.0/22
IP: 118.179.0.0/21
IP: 2401:bac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116231 (0x1c607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 15:37:31 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:da:ed:10:e2:68:eb:09:be:be:5c:2c:7a:
43:3b:1b:88:1b:42:37:19:86:4f:da:e2:0a:47:81:
08:35:b3:79:13:37:55:65:46:9b:7f:74:32:86:a8:
5a:65:f7:0a:8c:07:fb:78:67:d4:6b:11:b5:73:8f:
d1:48:d7:69:92:7f:f3:36:c3:f2:b4:8d:e6:33:cf:
33:d3:fa:8e:19:d7:59:9a:f2:9b:5b:75:25:01:5b:
bb:a9:57:02:b2:7c:31:ba:61:ad:ef:ab:f4:b6:7d:
90:09:e2:6c:c6:b3:2a:74:1e:9e:8c:14:cf:bb:fd:
54:51:57:02:e6:9b:79:74:02:cb:0b:54:97:f0:6b:
0d:59:4f:44:97:51:0c:9a:f8:0e:f0:87:52:ac:1a:
31:e3:15:be:09:bb:39:b4:4e:54:35:af:e5:42:aa:
21:26:cf:98:62:ab:ce:5b:9d:c6:27:b6:6e:c0:2e:
04:39:1d:81:06:dd:30:55:78:11:4d:9b:75:21:95:
58:e0:95:41:98:e8:bd:62:76:3b:c0:30:a2:af:b9:
34:94:d9:e2:8d:54:93:1c:76:9b:de:cd:ae:f7:7c:
5e:6d:5a:b0:29:d9:71:27:f8:92:72:a7:4c:c9:b6:
76:61:19:a2:a5:09:17:8b:5e:50:28:3f:da:69:e8:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23729
132684
sbgp-ipAddrBlock: critical
IPv4:
103.100.92.0/22
118.179.0.0/21
IPv6:
2401:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
47:4c:e4:87:e1:b2:b6:36:9f:72:27:d6:ae:86:8b:55:46:21:
2a:5b:ac:a6:a6:63:d3:0c:bc:6b:dd:56:56:e1:dd:cf:5f:65:
06:91:98:40:94:16:8b:ab:3e:9d:70:f9:6f:a5:e5:65:6d:4a:
e8:7a:2b:bc:83:9e:c9:87:c4:62:aa:79:d8:b4:8c:55:46:25:
d0:7c:5b:6b:2f:84:f4:de:98:55:ee:a8:17:4c:09:01:5b:14:
58:07:18:84:4b:88:04:f5:2e:08:d9:14:5c:a2:dc:28:00:64:
14:f1:f3:d8:ab:b3:f7:18:b2:99:1b:df:80:92:d8:ba:8b:34:
66:5f:e9:0f:be:dd:9a:78:fa:37:77:cc:50:08:eb:ae:12:ef:
f4:c3:5c:77:e3:b4:fa:e4:21:01:e3:1a:10:d2:f5:e2:67:ed:
63:d3:14:02:eb:b1:cd:84:4e:9c:c2:88:a5:bc:39:5e:cb:07:
5d:0e:0d:20:06:31:ab:f4:08:94:ec:3e:fa:a7:fe:2d:1a:30:
91:da:91:f5:d5:0f:e4:f9:a0:8f:55:36:3b:ae:a7:48:91:52:
fd:f5:28:da:65:5a:77:b6:51:59:f4:4c:0d:05:fa:46:25:24:
79:c3:37:2e:fb:62:d0:0e:bf:b5:b4:e8:12:b4:19:8c:0f:21:
be:25:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:03:05 2024 by rpki-client on console-fra.rpki-client.org