Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
File: dmhXuj98cotoBSWsQfp84qHwCS0.cer (raw, json)
Hash identifier: 9q5rxqpMM+yvmCPkOLcfHHLdx6OqapQ5shD4Tt7eCOg=
Subject key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C695
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Oct 2023 14:10:34 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 139671
AS: 149778
IP: 103.143.112.0/23
IP: 2405:4cc0::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116373 (0x1c695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 14:10:34 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:4b:e1:94:3a:99:d0:5d:00:f7:48:84:cf:
17:21:67:88:06:1f:08:9a:b9:85:6c:4c:62:64:5b:
74:b0:27:a3:50:81:71:6a:d6:db:cf:ea:37:47:b9:
53:9f:e8:fd:06:a2:c6:1b:36:6e:f3:97:11:0b:5b:
b2:b0:00:18:3e:66:a0:6d:8b:3c:14:3f:a6:79:e3:
1b:9d:12:9c:0c:99:39:0e:dc:f1:b3:85:26:88:c0:
32:f1:ca:1d:34:54:24:5c:f4:54:a6:28:b0:d0:00:
f8:f6:62:e0:cf:de:b1:f6:11:1e:6f:23:cf:13:49:
66:83:f8:72:47:a4:26:07:35:02:35:f0:39:08:a0:
cf:ee:20:1a:54:22:d1:21:c0:40:f9:4f:d0:d8:c4:
cd:df:68:97:0e:ac:75:1e:a2:72:81:ae:08:80:94:
0b:98:c0:79:1f:d1:ff:d7:b2:5a:7e:fb:e1:de:ba:
18:a5:a3:46:e9:ad:fe:44:26:64:47:63:0b:f7:cb:
07:32:a3:13:55:cd:d6:2f:66:5e:22:ea:f9:ce:8c:
b8:b3:4c:96:ff:83:92:19:96:8e:dc:d6:1e:4c:43:
f9:52:4f:b3:9a:e8:59:7c:84:70:6a:88:c1:4f:0d:
e9:b2:74:bb:e7:6c:ad:fa:6c:ef:f7:c2:4a:d0:e6:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139671
149778
sbgp-ipAddrBlock: critical
IPv4:
103.143.112.0/23
IPv6:
2405:4cc0::/31
Signature Algorithm: sha256WithRSAEncryption
a9:3d:db:c0:21:50:11:f5:7c:a6:89:c2:83:20:e2:e6:13:d2:
20:ff:ae:6f:39:d2:08:47:f7:8b:a1:fb:47:32:74:5f:e7:3b:
c0:e0:00:da:7e:37:eb:3d:72:54:c9:d1:9f:22:64:43:97:fc:
a6:b9:39:c9:fd:47:a2:48:7f:0c:49:71:82:0e:71:70:32:fe:
7c:77:90:85:07:a0:86:4b:42:67:ce:14:3e:43:f1:6f:ff:b5:
75:28:a0:65:15:df:3d:b2:ef:33:53:a1:0d:63:37:0d:de:2c:
37:d8:12:bc:83:b6:09:79:97:f8:97:6b:8c:a0:51:5c:5f:7c:
e6:6a:ca:b5:85:55:a2:d4:38:37:bb:78:02:0c:73:2c:8a:15:
96:73:a7:f9:6c:ae:5b:de:92:f9:0c:c8:f8:29:4d:80:08:34:
dc:6f:8e:d4:54:23:21:37:82:ce:7e:77:23:8d:e8:4c:4d:55:
52:1f:a6:78:40:bb:93:f7:e9:b8:e9:82:87:a5:50:8c:23:6e:
67:4c:85:d0:b0:c5:59:1d:b9:72:af:dc:71:a7:69:93:ea:70:
e8:de:92:a2:6a:5a:c7:9c:1d:73:64:4d:b6:14:da:c1:37:f2:
93:c3:c1:b1:eb:0b:cb:2a:94:96:24:3a:39:21:b1:41:4b:f9:
7b:40:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:41 2024 by rpki-client on console-ams.rpki-client.org