Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
File: dmhXuj98cotoBSWsQfp84qHwCS0.cer (raw, json)
Hash identifier: i2FXIKKP1YIGgzT5HxIHswM/Fc39MipVHuT9FqzQqhw=
Subject key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0217F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Nov 2024 18:39:53 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139671
AS: 149778
IP: 103.143.112.0/23
IP: 2405:4cc0::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137203 (0x217f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 1 18:39:53 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9148AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:4b:e1:94:3a:99:d0:5d:00:f7:48:84:cf:
17:21:67:88:06:1f:08:9a:b9:85:6c:4c:62:64:5b:
74:b0:27:a3:50:81:71:6a:d6:db:cf:ea:37:47:b9:
53:9f:e8:fd:06:a2:c6:1b:36:6e:f3:97:11:0b:5b:
b2:b0:00:18:3e:66:a0:6d:8b:3c:14:3f:a6:79:e3:
1b:9d:12:9c:0c:99:39:0e:dc:f1:b3:85:26:88:c0:
32:f1:ca:1d:34:54:24:5c:f4:54:a6:28:b0:d0:00:
f8:f6:62:e0:cf:de:b1:f6:11:1e:6f:23:cf:13:49:
66:83:f8:72:47:a4:26:07:35:02:35:f0:39:08:a0:
cf:ee:20:1a:54:22:d1:21:c0:40:f9:4f:d0:d8:c4:
cd:df:68:97:0e:ac:75:1e:a2:72:81:ae:08:80:94:
0b:98:c0:79:1f:d1:ff:d7:b2:5a:7e:fb:e1:de:ba:
18:a5:a3:46:e9:ad:fe:44:26:64:47:63:0b:f7:cb:
07:32:a3:13:55:cd:d6:2f:66:5e:22:ea:f9:ce:8c:
b8:b3:4c:96:ff:83:92:19:96:8e:dc:d6:1e:4c:43:
f9:52:4f:b3:9a:e8:59:7c:84:70:6a:88:c1:4f:0d:
e9:b2:74:bb:e7:6c:ad:fa:6c:ef:f7:c2:4a:d0:e6:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139671
149778
sbgp-ipAddrBlock: critical
IPv4:
103.143.112.0/23
IPv6:
2405:4cc0::/31
Signature Algorithm: sha256WithRSAEncryption
a0:dd:01:c9:aa:56:2a:34:ac:18:14:da:08:79:0b:51:9a:09:
9e:2c:3c:54:67:e7:66:c4:e0:0b:cd:b8:49:a4:f5:ad:8d:78:
11:7c:f9:19:22:74:c2:e2:37:f5:0a:31:ff:0e:3c:a2:6f:29:
4b:21:7b:ff:30:f8:e6:81:2e:a9:3f:06:44:8a:7d:c5:0c:98:
fc:ef:54:86:a2:d0:1f:00:68:9d:45:0a:98:f4:76:80:94:88:
f4:d4:41:f2:f8:69:ef:89:51:67:01:3c:b6:6d:d5:bd:f8:ed:
76:67:20:a3:18:70:0f:d2:96:a3:f4:10:51:33:bc:d5:47:bb:
da:67:9c:ec:de:43:2e:1f:04:8d:b6:55:c7:a9:63:cb:ac:46:
ba:60:f0:1a:9c:07:55:41:83:2c:fb:89:90:a5:bc:49:a5:0d:
8b:2b:c6:51:3f:42:4f:f9:31:23:bd:bd:24:65:86:ef:a4:c4:
05:a5:53:2f:69:8b:e0:3e:78:12:70:53:6e:55:f1:6b:9e:26:
3d:c3:43:4a:34:8b:90:d4:6f:fd:1e:72:38:e1:b9:ad:87:0f:
8e:4e:e8:67:1b:24:98:6b:2a:1d:01:fe:30:37:0a:9c:9c:1a:
cf:83:1f:66:ff:5a:c3:5d:59:2a:e2:99:49:fa:01:a9:d1:9c:
9c:a0:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:40 2025 by rpki-client