Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
File: gL6TDjBkmxKs7o3EC1dat93mSUU.cer (raw, json)
Hash identifier: 1hp86uj++Sn7yOo/7U1P1MUdyq1MP/iDV0p9Zv1E0n4=
Subject key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F21
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Nov 2024 23:05:16 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151844
IP: 103.249.114.0/23
IP: 2001:df2:ff40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139041 (0x21f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 30 23:05:16 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E0C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:04:45:c4:e4:e4:40:e1:1d:2c:e9:60:90:
d8:09:22:5a:0c:fc:05:c5:03:df:34:e1:19:58:d5:
f2:a8:e2:ac:d6:19:b6:b3:02:3f:80:e1:91:8d:d3:
27:53:dc:5d:17:9d:cd:df:38:4e:ea:ab:52:33:47:
b6:8e:fd:b1:5a:4d:b7:5a:32:69:12:49:e1:30:16:
44:c4:0d:e2:31:be:1f:2e:c5:a6:35:48:ac:64:22:
f5:4f:5b:b3:ff:e6:de:e9:ef:23:cd:aa:de:e2:71:
9b:87:4d:ec:99:89:0a:6e:8a:4b:33:1c:0d:dd:97:
7b:1d:50:0a:67:06:5f:fc:d7:b4:be:1a:78:14:49:
94:30:45:59:f1:9b:f1:07:91:c1:63:68:e5:81:9b:
7b:8a:f4:84:a1:f4:66:8e:89:19:a3:ab:de:1d:dd:
99:35:75:09:bd:91:5e:08:9a:bc:55:30:ea:c1:ea:
99:2a:fa:f5:9d:2a:a5:f8:3d:4d:30:64:2e:a8:4a:
3f:5e:8f:1b:d0:59:e0:74:b1:6d:54:a2:ad:31:80:
7a:5d:46:1b:69:38:fb:1f:94:76:ed:df:3c:5d:2e:
ff:91:b3:ea:8e:72:6a:43:e4:0b:29:b7:d0:bd:48:
f1:97:e8:a4:8e:b6:66:06:72:07:92:06:ed:a8:7f:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151844
sbgp-ipAddrBlock: critical
IPv4:
103.249.114.0/23
IPv6:
2001:df2:ff40::/48
Signature Algorithm: sha256WithRSAEncryption
33:7d:c6:ef:59:a7:8d:29:79:ef:61:87:09:19:33:db:cf:58:
f6:92:e1:5c:45:73:8d:dd:12:4a:80:bc:75:b8:ea:d4:39:b7:
47:c5:4b:de:aa:b6:6b:a1:5a:0e:3e:78:f2:b7:66:f5:04:ce:
04:ab:53:d4:8a:1d:e7:b2:2c:ae:a6:51:5b:99:58:4c:c5:80:
de:47:d3:ec:cc:ee:db:f4:23:4a:97:a6:c4:d7:44:09:96:18:
d1:be:5b:0f:6f:74:37:1c:fb:af:c1:9f:d6:44:c4:b8:cf:9d:
03:bc:ad:1b:a5:c9:2f:fa:88:5f:ee:57:da:9d:b7:b6:f6:07:
f7:fa:09:c4:7d:21:3a:e1:d2:db:4d:65:3c:fd:fa:93:43:17:
02:f9:61:7c:d1:7c:19:f9:2a:c8:73:19:2c:49:c9:05:d9:9e:
03:db:eb:03:bb:e6:45:b4:c4:f8:56:72:ed:ab:ba:80:94:ad:
be:69:61:11:ff:1a:cb:dc:ab:e8:ed:8b:fc:7a:f7:10:b1:94:
d7:1e:0b:5e:2d:0e:73:99:6a:a5:ae:a0:30:17:b9:56:bd:86:
6b:55:1d:54:95:9e:7e:3d:36:9d:fa:a2:c1:3c:1e:00:28:0f:
f4:2a:36:96:83:7c:85:be:a7:48:15:36:c5:70:f3:34:53:60:
fe:1d:04:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:09 2025 by rpki-client