Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
File: hseUaUaypXsFbwKyeTQNMMLOSbQ.cer (raw, json)
Hash identifier: wE8hx6dWaI9wQSL/1YprVHEOOa5BlDkLZyy9ofF7M5k=
Subject key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021311
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Oct 2024 12:39:54 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 7540
AS: 9586
AS: 9828
AS: 10232
IP: 103.1.36.0/22
IP: 117.18.96.0/24
IP: 117.18.98.0/24
IP: 117.18.105.0 -- 117.18.109.255
IP: 117.18.112.0 -- 117.18.116.255
IP: 117.18.119.0 -- 117.18.122.255
IP: 202.4.26.0/23
IP: 202.181.136.0 -- 202.181.138.255
IP: 202.181.140.0 -- 202.181.142.255
IP: 202.181.146.0/23
IP: 202.181.149.0 -- 202.181.150.255
IP: 202.181.152.0/24
IP: 202.181.154.0/23
IP: 202.181.160.0 -- 202.181.176.255
IP: 202.181.178.0 -- 202.181.187.255
IP: 202.181.189.0/24
IP: 202.181.192.0 -- 202.181.203.255
IP: 202.181.205.0 -- 202.181.218.255
IP: 202.181.220.0 -- 202.181.247.255
IP: 2405:5d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135953 (0x21311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 12:39:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:90:3c:29:01:3e:22:86:ac:7d:86:d3:85:
a4:0a:fd:64:ad:52:1b:63:52:22:93:2b:84:0d:ee:
fb:5e:ee:9a:4a:44:6d:7f:69:0b:61:b1:66:48:bd:
88:69:56:2c:4d:61:4a:1c:1a:81:bc:61:0c:b6:f4:
c3:10:e9:e5:de:40:f3:bb:3d:66:37:34:2e:86:a3:
10:06:b6:a4:95:69:99:72:ab:69:76:62:ee:90:08:
10:e9:60:d7:c7:1c:51:8f:52:7c:f1:b6:76:b3:78:
f9:2b:12:3d:8a:d8:d6:2d:e1:3c:97:ed:07:7b:ca:
a4:59:6f:1a:85:ab:4d:21:90:9b:1a:05:e7:e1:82:
75:54:3f:d6:2d:11:9e:01:1b:73:b0:3b:87:90:8f:
6b:ce:28:f6:71:f1:ac:77:c1:05:b9:40:80:a6:de:
72:8b:fa:1f:15:13:10:50:40:72:3b:f0:cf:06:fe:
67:11:ed:db:e1:bf:9a:4b:c5:43:dc:05:ae:5a:27:
01:d0:c4:50:45:90:57:6e:be:7d:e9:1a:0d:9e:0b:
7c:ed:28:22:d1:ed:dc:5d:49:a7:6f:3b:c8:f1:63:
6e:6e:a9:54:73:6a:98:3b:7d:18:a8:54:41:c9:26:
b9:51:de:b0:14:f1:cc:33:bc:50:b3:bf:7f:f7:1e:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7540
9586
9828
10232
sbgp-ipAddrBlock: critical
IPv4:
103.1.36.0/22
117.18.96.0/24
117.18.98.0/24
117.18.105.0-117.18.109.255
117.18.112.0-117.18.116.255
117.18.119.0-117.18.122.255
202.4.26.0/23
202.181.136.0-202.181.138.255
202.181.140.0-202.181.142.255
202.181.146.0/23
202.181.149.0-202.181.150.255
202.181.152.0/24
202.181.154.0/23
202.181.160.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0/24
202.181.192.0-202.181.203.255
202.181.205.0-202.181.218.255
202.181.220.0-202.181.247.255
IPv6:
2405:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
c4:19:9a:79:10:8b:7f:73:27:30:6f:9d:14:ab:63:53:b7:3e:
56:9b:60:57:30:9c:56:3e:47:c6:1b:6c:94:05:e1:c2:38:5e:
b3:0e:81:8a:61:9a:48:40:48:41:7d:29:b1:d9:44:ae:0a:06:
a6:a8:e1:44:4e:ae:a3:eb:86:bb:b9:ff:51:7f:95:f7:57:60:
71:de:80:23:f6:05:dd:0b:f4:5e:b0:b0:a1:8c:d8:de:cf:e7:
fd:c2:08:7c:aa:9f:7c:92:60:36:0e:9a:c3:7b:a5:85:a3:4c:
64:46:02:1b:38:91:63:7a:08:f0:e3:a7:fd:eb:f0:fc:d5:12:
f6:94:37:79:e3:28:c1:0a:69:13:6e:7c:5c:b8:d5:1f:75:ba:
74:44:6d:b7:3e:83:0b:ab:5f:89:21:b9:00:2b:37:d7:47:a2:
4e:c7:52:61:03:74:af:c2:bc:a6:bf:f2:3b:9d:b4:b2:64:a8:
ae:8c:ca:08:30:eb:5c:bf:b8:a4:9b:20:81:85:60:08:37:cd:
2d:3a:e5:72:cb:04:25:5d:c3:06:76:a6:98:c4:52:6a:a8:c9:
6e:ed:5a:60:6b:52:6c:95:ce:b7:92:56:b4:0c:33:f3:3c:bd:
f4:85:ea:55:1b:6a:86:12:55:01:80:70:fd:37:55:05:6b:c8:
82:1d:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:15:43 2024 by rpki-client on console-ams.rpki-client.org