Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer (raw, json)
Hash identifier: ctJjHj23+tfTBHoTuUljqEWgqwvlV7AO0Qhst1qh6iw=
Subject key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0219BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 09:17:12 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 138446
IP: 103.125.148.0/22
IP: 2403:f640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137660 (0x219bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 09:17:12 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:33:d7:67:e2:7e:84:c5:e5:89:3e:d3:2f:
d3:28:98:63:b7:79:23:be:8c:11:1c:bb:27:c4:8d:
5b:ed:f2:29:dd:4a:1b:de:c3:6d:0f:bb:d8:fd:ea:
61:12:fe:0d:21:29:82:18:50:20:07:32:c6:68:d1:
24:cf:6a:8a:47:61:3e:39:26:12:50:89:37:27:ea:
63:be:d8:20:87:e2:5f:09:68:2f:0b:56:a1:ae:0b:
5d:67:78:f6:a7:fb:5c:e1:67:f2:2f:cf:0f:8d:9f:
bb:3d:3b:a3:35:16:d0:b6:5d:18:d0:74:72:b2:71:
94:06:f0:78:dc:98:e1:63:55:91:9b:d2:0d:80:dc:
e6:94:81:cb:c8:a1:cb:64:62:05:f5:4f:36:fd:06:
d8:8b:3e:91:f7:d4:a9:ac:2a:e4:91:a5:af:e1:97:
82:e1:85:31:ad:65:4d:91:ae:31:88:05:98:bd:69:
07:9f:df:a0:b0:23:cf:61:c3:b6:07:30:f9:bd:83:
ad:aa:3f:85:26:3c:b9:c6:e3:af:80:28:5f:0c:f8:
1d:30:46:98:ce:21:29:a7:a8:f0:5e:93:95:a8:43:
b0:da:63:51:21:e6:85:2e:2c:b1:db:16:f5:c7:64:
4f:d1:d0:80:72:9b:0c:4d:0a:e8:bc:fe:f8:cd:88:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138446
sbgp-ipAddrBlock: critical
IPv4:
103.125.148.0/22
IPv6:
2403:f640::/32
Signature Algorithm: sha256WithRSAEncryption
5f:ae:57:26:89:79:42:2d:d8:18:51:3a:60:82:d5:be:b9:fb:
33:bb:94:b8:73:6d:c3:07:5c:dd:b1:02:8c:b8:9f:88:cc:49:
bd:a8:6f:41:5d:32:1d:7e:5b:d2:ab:6e:ca:65:8b:81:42:c1:
00:d3:ed:5f:50:7b:7c:03:c6:58:c0:c1:2a:14:26:a7:4c:7b:
c0:b8:ce:b5:62:ee:f9:0e:1c:8c:ca:24:f1:31:f4:e9:c9:5a:
40:21:a8:7a:84:6d:eb:f1:33:3a:a1:0a:eb:d0:c1:9b:8e:23:
7c:55:8c:68:04:36:85:2b:52:34:a1:4e:45:4f:d1:c5:92:2a:
17:e0:68:f5:61:e1:6a:d0:02:e5:23:0e:ef:34:83:98:3c:d3:
c1:7a:e5:15:60:a5:ed:e4:1c:a4:c2:79:c3:e4:43:87:49:cf:
c4:90:06:ca:6d:dc:9b:bb:d3:4d:7d:03:1f:11:41:6a:0b:76:
ae:b0:ee:b3:c8:23:6c:a6:96:c0:e0:10:7a:09:a8:b9:9e:73:
1a:53:a9:7a:50:3d:cc:61:6a:6e:27:15:5c:92:0e:23:0b:15:
97:29:6b:03:a6:3c:5e:4d:a7:2d:37:7a:a8:83:da:88:99:13:
4d:d6:df:52:f0:d4:1c:f8:c8:28:4e:4b:99:34:fb:62:59:4f:
9d:c5:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:39 2024 by rpki-client on console-fra.rpki-client.org