Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
File: hUw8jb_u2qy7OypCS1iyWaFMnws.cer (raw, json)
Hash identifier: 6pVokOGyI0+MKFsl6CNS5ZVqx8bfoh1BFbE7fAZF0h8=
Subject key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E867
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Apr 2024 22:40:18 +0000
Certificate not after: Thu 01 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 150726
IP: 103.74.10.0/23
IP: 2001:df1:dd40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125031 (0x1e867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 22:40:18 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:12:c2:03:ff:e9:8a:4e:19:c9:27:87:69:
e0:96:13:bc:ba:20:dd:6a:69:08:00:78:74:a9:2d:
31:ab:38:9a:54:35:07:7a:3f:58:dc:7c:9b:8f:47:
76:c2:d0:53:ab:f0:06:66:ff:e1:46:fb:a9:04:34:
8b:8f:eb:86:bb:ae:1f:f4:0c:b3:cc:44:d4:9d:3f:
07:12:18:d2:4b:a2:d1:24:68:3e:a1:a7:9c:e8:12:
1e:3b:0b:51:0d:92:d4:6b:47:20:c5:06:98:6a:0c:
f0:d3:09:09:6f:61:b9:fb:ce:c4:b1:74:a0:30:89:
6e:fc:55:9d:db:54:d7:ee:e9:1e:dc:29:18:7a:ea:
85:10:dc:39:89:75:44:0e:42:e5:dc:08:aa:cd:ad:
8d:1f:64:d1:89:ab:a7:42:6c:b5:bf:ef:09:3e:c5:
da:b0:d5:9d:3a:a8:5a:4b:9e:fb:04:5d:6e:8e:22:
71:c5:09:5f:ec:2e:d7:93:bf:01:74:3a:f7:57:cd:
bc:48:3d:0c:b1:4f:78:40:bb:74:ad:11:09:27:a7:
52:52:e8:bc:fb:20:29:5e:93:b9:fb:d7:d3:76:69:
b6:31:48:10:b6:67:03:d8:65:75:bb:17:ee:1f:03:
d9:52:de:dc:6e:cd:88:bd:32:de:20:b8:70:01:22:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150726
sbgp-ipAddrBlock: critical
IPv4:
103.74.10.0/23
IPv6:
2001:df1:dd40::/48
Signature Algorithm: sha256WithRSAEncryption
52:bc:cb:3f:d8:3c:4a:58:7d:36:8a:6f:31:3e:3a:8b:ee:e3:
8c:73:0d:79:20:73:fa:ef:02:40:0d:7b:38:38:58:c2:fd:73:
d5:cd:c3:ac:e8:be:11:4c:e8:ba:20:45:2e:68:8b:3c:dd:1c:
63:12:b4:32:1b:51:64:e2:40:d4:9a:35:5a:88:5c:8d:21:73:
5a:5b:40:67:68:00:d6:b5:45:06:fb:c4:12:61:10:5c:aa:6c:
8e:93:6e:d5:8e:ce:fd:32:48:e5:89:fb:75:59:e4:c7:1d:5c:
07:d6:b4:d0:b0:31:d3:26:0b:73:6d:81:28:38:2a:18:37:cf:
72:c3:2f:18:2f:2e:8e:9c:f3:ae:a1:5f:05:78:26:29:4b:53:
3c:7c:23:5e:ec:68:4a:b9:e4:e5:a4:3a:67:6b:5e:5e:39:10:
44:2f:18:62:d4:b6:fb:45:f9:37:c1:39:1f:0e:ff:a0:b0:74:
6f:34:fe:58:f9:77:26:bb:83:54:31:0b:86:e1:69:61:24:6b:
ed:f5:6b:28:79:2d:42:12:f5:3d:a2:ba:e0:34:5c:57:e1:72:
51:a2:43:af:47:39:ad:7e:1c:37:3f:76:1e:99:0e:ba:eb:94:
ec:ba:3c:96:5d:9c:ec:62:81:2b:87:03:4d:9b:ba:f1:00:12:
35:7f:6a:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:32 2024 by rpki-client on console-fra.rpki-client.org