Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer
File: fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer (raw, json)
Hash identifier: TPJmFCbawQlK09OradH5Myvi31xgl7m8zEE97ViEcjs=
Subject key identifier: 7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DE81
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Feb 2024 16:11:55 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.247.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122497 (0x1de81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 12 16:11:55 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:52:ec:68:49:99:1e:34:a1:ce:ac:85:76:
5f:99:2d:2c:99:ec:9c:3a:b9:1f:f5:c0:e0:fa:a3:
16:8e:e8:7c:5e:8c:9f:24:88:a3:de:88:13:61:a0:
59:be:f9:d2:47:eb:4c:eb:ba:b5:54:5c:18:13:82:
0a:ef:66:a6:9c:6d:5d:4f:11:17:58:ec:a1:54:dd:
9a:ff:18:f2:52:6c:a2:6c:1c:00:a9:bb:43:97:0f:
74:d8:12:62:bf:22:0f:ab:ff:5b:8f:80:89:84:48:
37:8e:c9:76:27:a8:1c:bc:7e:17:41:cb:35:41:68:
f4:63:f3:83:59:6c:08:2d:0d:eb:48:bd:29:ae:41:
fe:2e:ae:9e:27:37:d3:08:59:64:79:c2:02:1d:0d:
7d:09:3d:5e:a4:35:04:5e:0e:de:dd:40:ce:1c:1b:
ac:13:9e:ff:39:23:87:7b:5f:e6:af:51:8f:a2:0a:
c1:1b:d8:5d:96:8e:21:b8:da:4c:f2:eb:1d:cf:cf:
44:5a:b6:aa:5e:78:a6:78:da:78:58:d7:6d:a1:ce:
fb:73:a1:1e:1a:be:e2:c7:53:e0:cd:5a:c0:f3:92:
fd:d4:ac:20:c9:4b:a5:33:03:a7:d7:a7:f0:8f:46:
31:bc:70:d2:8f:ac:cf:6f:19:6f:bf:2a:e2:48:97:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:a1:67:03:05:30:33:00:51:cd:d2:a5:a7:a1:fc:e4:c7:f2:
1c:71:f7:12:e7:fc:c4:96:b7:db:0e:7b:3d:06:51:08:23:03:
5d:27:8e:6a:ed:01:9a:e0:62:fb:17:0f:17:a7:8b:8a:56:df:
dd:a0:b5:91:0a:bd:b8:c2:f3:e6:a6:a1:c7:c6:bb:2e:2e:08:
0b:a0:d5:af:1b:70:98:eb:49:70:0e:ce:27:18:b8:7e:52:f8:
a8:7d:dc:6c:97:0c:e0:c7:47:d5:34:cc:94:41:58:87:9a:46:
2e:cf:df:88:26:bc:aa:f5:5c:65:47:b9:e5:83:9c:f4:00:cb:
a5:a0:6f:f9:56:ca:05:c9:7d:79:99:99:cb:45:9a:e5:da:6e:
1b:48:43:ec:e3:85:2d:dc:3c:a0:cf:f9:2c:69:8a:ea:5c:d3:
c7:58:e0:09:f8:ae:95:ce:1a:16:74:37:94:48:de:e6:2f:b9:
b6:4b:b8:df:cc:8b:75:6d:8a:2b:46:70:8e:02:77:58:27:b2:
e7:d3:9b:ce:a8:26:4a:54:19:69:81:1e:df:48:11:95:4f:95:
5a:53:cf:73:f9:c3:fb:38:91:0a:97:4a:c5:88:93:fc:ab:f4:
c3:1a:1f:cb:c5:ac:38:1e:a4:89:56:d1:35:18:a0:b2:4e:74:
cb:d6:e4:4a
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAd6BMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIxMjE2MTE1NVoXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjU4QjExMTAvBgNVBAUTKDdDMzJFNjZGMzVDMDNCQzI3QkUwRENG
N0NBNDZCOTY2MTYwOTlFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDN7FLsaEmZHjShzqyFdl+ZLSyZ7Jw6uR/1wOD6oxaO6HxejJ8kiKPeiBNhoFm+
+dJH60zrurVUXBgTggrvZqacbV1PERdY7KFU3Zr/GPJSbKJsHACpu0OXD3TYEmK/
Ig+r/1uPgImESDeOyXYnqBy8fhdByzVBaPRj84NZbAgtDetIvSmuQf4urp4nN9MI
WWR5wgIdDX0JPV6kNQReDt7dQM4cG6wTnv85I4d7X+avUY+iCsEb2F2WjiG42kzy
6x3Pz0RatqpeeKZ42nhY122hzvtzoR4avuLHU+DNWsDzkv3UrCDJS6UzA6fXp/CP
RjG8cNKPrM9vGW+/KuJIl3whAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUfDLmbzXA
O8J74Nz3yka5ZhYJnukwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1OEIxLzQ3NzYzQkFBNTUzRDExRUJBMjY5RkI3M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NThCMS80Nzc2M0JBQTU1M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpY
QU84Sjc0TnozeWthNVpoWUpudWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJn96AwDQYJKoZIhvcNAQELBQADggEBABqhZwMFMDMAUc3Spaeh
/OTH8hxx9xLn/MSWt9sOez0GUQgjA10njmrtAZrgYvsXDxeni4pW392gtZEKvbjC
8+amocfGuy4uCAug1a8bcJjrSXAOzicYuH5S+Kh93GyXDODHR9U0zJRBWIeaRi7P
34gmvKr1XGVHueWDnPQAy6Wgb/lWygXJfXmZmctFmuXabhtIQ+zjhS3cPKDP+Sxp
iupc08dY4An4rpXOGhZ0N5RI3uYvubZLuN/Mi3VtiitGcI4Cd1gnsufTm86oJkpU
GWmBHt9IEZVPlVpTz3P5w/s4kQqXSsWIk/yr9MMaH8vFrDgepIlW0TUYoLJOdMvW
5Eo=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:18:36 2024 by rpki-client on console-fra.rpki-client.org