Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer (raw, json)
Hash identifier: pweE875SNLH0WJ4f9ImSZJl0NxNXEb8M2WURPS18vW8=
Subject key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CE73
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 01:10:07 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 138446
IP: 103.125.148.0/22
IP: 2403:f640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 10:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118387 (0x1ce73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 01:10:07 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:33:d7:67:e2:7e:84:c5:e5:89:3e:d3:2f:
d3:28:98:63:b7:79:23:be:8c:11:1c:bb:27:c4:8d:
5b:ed:f2:29:dd:4a:1b:de:c3:6d:0f:bb:d8:fd:ea:
61:12:fe:0d:21:29:82:18:50:20:07:32:c6:68:d1:
24:cf:6a:8a:47:61:3e:39:26:12:50:89:37:27:ea:
63:be:d8:20:87:e2:5f:09:68:2f:0b:56:a1:ae:0b:
5d:67:78:f6:a7:fb:5c:e1:67:f2:2f:cf:0f:8d:9f:
bb:3d:3b:a3:35:16:d0:b6:5d:18:d0:74:72:b2:71:
94:06:f0:78:dc:98:e1:63:55:91:9b:d2:0d:80:dc:
e6:94:81:cb:c8:a1:cb:64:62:05:f5:4f:36:fd:06:
d8:8b:3e:91:f7:d4:a9:ac:2a:e4:91:a5:af:e1:97:
82:e1:85:31:ad:65:4d:91:ae:31:88:05:98:bd:69:
07:9f:df:a0:b0:23:cf:61:c3:b6:07:30:f9:bd:83:
ad:aa:3f:85:26:3c:b9:c6:e3:af:80:28:5f:0c:f8:
1d:30:46:98:ce:21:29:a7:a8:f0:5e:93:95:a8:43:
b0:da:63:51:21:e6:85:2e:2c:b1:db:16:f5:c7:64:
4f:d1:d0:80:72:9b:0c:4d:0a:e8:bc:fe:f8:cd:88:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138446
sbgp-ipAddrBlock: critical
IPv4:
103.125.148.0/22
IPv6:
2403:f640::/32
Signature Algorithm: sha256WithRSAEncryption
0c:d1:70:38:88:a9:27:53:75:fc:25:73:f0:61:52:fb:ca:e0:
05:3a:1c:59:cb:2f:9b:e9:79:a1:6b:8f:13:ca:1b:3a:1e:4d:
f7:c8:c1:33:d4:3f:e2:ed:51:1c:e7:73:aa:28:42:bc:6a:0e:
f2:d7:97:11:65:a9:41:04:75:27:7c:62:ca:cd:81:85:cf:55:
76:51:e1:5c:09:b2:b5:5a:8e:d6:ec:83:e4:df:85:78:ca:50:
42:64:c2:54:45:48:7f:e2:bd:50:c4:af:5e:02:4b:59:2c:d3:
ec:3e:63:3e:da:3e:7d:79:5c:f3:e1:2a:85:ff:15:67:09:a2:
e6:45:d6:32:d0:e4:f8:08:2c:0f:c1:9c:d3:20:73:6b:74:e9:
58:37:33:a5:66:cb:7e:24:43:85:3c:df:75:72:55:64:73:88:
14:05:64:dc:3e:06:0a:ac:b1:e6:f7:b7:b1:58:1b:88:02:a6:
9f:29:ac:2e:56:de:c8:bc:07:a7:59:d6:06:c0:3f:3c:e3:71:
96:ca:a3:6e:36:7c:be:8b:a1:fa:3b:b7:f5:53:cd:6e:a2:39:
9c:38:43:e9:c6:8a:24:c1:2b:8a:f1:ff:b8:11:16:d1:1e:d4:
08:1a:af:98:9d:cf:5b:dd:49:ab:cd:81:12:70:0f:ee:89:89:
bd:b4:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 12:30:42 2024 by rpki-client on console-fra.rpki-client.org