Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer (raw, json)
Hash identifier: p6H4gSoxy3ypqNKOJrfx6Py2D638g7RkUgr6GbnBpW0=
Subject key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EC37
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Apr 2024 15:04:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 133104
IP: 103.152.248.0/23
IP: 119.252.176.0/21
IP: 2405:c400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126007 (0x1ec37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 18 15:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:17:cb:37:17:49:d3:05:f4:e3:80:9b:29:
44:36:ef:5b:19:ba:d2:51:40:71:eb:20:2f:12:43:
f0:86:48:d6:33:07:0b:86:a1:6a:07:14:87:0c:29:
77:ea:74:ba:0a:8e:01:91:63:45:cd:b9:b2:7c:b9:
4c:af:20:d4:cb:a8:33:79:42:9b:f1:38:a0:87:09:
6d:6a:6f:84:30:9f:e3:32:41:61:59:b6:b7:09:b6:
43:d2:26:8e:61:e6:85:28:37:ba:40:12:5c:44:13:
73:8d:a5:55:9a:d8:5e:5d:1a:a2:69:ed:46:60:10:
f8:48:50:d7:05:6e:0b:7d:59:44:21:0a:f0:29:61:
cf:e9:72:1d:5b:5f:af:fc:b4:c1:44:f7:2c:16:9a:
9a:81:90:97:ae:15:a6:dd:b0:5b:16:04:2b:43:48:
8a:cb:02:b5:c4:38:66:0c:b1:0d:b1:39:e6:14:a6:
d8:cc:b0:a0:d0:b0:82:ea:c7:5f:ac:96:62:ed:df:
cf:89:90:fb:b9:2e:86:ad:99:92:6f:c5:7d:f6:c0:
51:e7:0a:24:2f:78:59:ab:4d:0a:6c:57:9b:21:a5:
34:48:a1:5c:01:6c:66:58:89:cd:b9:40:5b:9d:96:
e7:20:44:df:82:9c:a6:36:bc:f9:cd:1a:20:6b:2c:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133104
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
119.252.176.0/21
IPv6:
2405:c400::/32
Signature Algorithm: sha256WithRSAEncryption
25:aa:61:3f:f6:fa:99:cd:4a:53:57:e6:91:3c:18:b8:36:29:
77:e3:13:d5:ed:f2:4e:1e:59:c0:0d:e4:9f:23:25:96:01:66:
af:aa:82:4b:d5:c8:54:ab:b5:17:16:b6:bd:67:1c:da:09:21:
fc:5a:0f:5a:e1:e0:ff:ec:13:71:cf:1e:96:dc:79:ef:cc:d0:
50:3e:00:24:dd:5e:a2:a7:92:cd:7a:e9:1f:73:e2:41:d7:fe:
dd:3c:34:b2:44:ac:f1:00:97:7d:7c:cc:fc:23:d0:3e:89:d4:
f1:fa:e6:6b:82:a4:98:eb:52:dd:b7:73:80:5f:b7:e3:67:b1:
d5:77:5e:da:82:e9:39:d0:f6:a2:59:da:2d:b6:fc:48:54:04:
c1:b9:8f:8e:2e:49:57:e5:49:f9:b8:47:44:25:68:06:a5:49:
66:72:c8:39:1b:36:48:1c:ff:d8:89:5d:77:35:a4:99:54:20:
a5:41:8a:c4:2d:ab:4a:cc:14:b5:0f:bf:22:f6:07:f9:20:da:
f6:4a:4d:30:b7:53:98:b9:c3:08:82:52:af:83:ca:88:29:e6:
ce:29:db:ad:19:2e:d3:c8:4d:ac:42:e2:20:1b:1d:cb:fc:8d:
47:88:77:9f:32:9d:2d:b4:e4:c7:d0:01:3a:58:4d:76:8a:a1:
6a:c5:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:59 2024 by rpki-client on console-fra.rpki-client.org