Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.cer (raw, json)
Hash identifier: lNF4lJExmv37ZiHZDsxImgdt4ukaxN/Wb32ykUIUGOA=
Subject key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBA0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Apr 2024 23:06:32 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 7646
AS: 17972
IP: 203.11.128.0/21
IP: 2402:6f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 09:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125856 (0x1eba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 23:06:32 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:e1:10:30:e9:07:30:b0:ce:cc:e6:b2:f3:
0c:1c:3c:c4:f7:7d:a0:17:1b:9e:eb:e2:f0:56:8e:
49:64:84:59:be:b2:f6:24:79:b3:73:c1:63:7b:dc:
1e:7e:57:a4:e8:6c:de:67:65:0d:c0:8a:c8:77:36:
6c:dc:22:27:aa:be:28:e5:bd:2b:91:4b:3c:3d:f3:
b6:07:96:89:6d:d3:dc:fd:2d:28:80:41:ce:b3:d9:
bf:8d:52:60:d4:9d:9f:84:db:a1:03:7e:e2:fb:74:
51:5b:4c:95:8e:f7:7f:b9:f0:f5:5a:b7:b0:49:f3:
f5:95:46:da:81:79:82:85:74:19:a4:19:67:5b:bb:
0f:79:48:0f:3e:d6:a0:9d:29:bf:9b:21:df:51:cd:
d7:0a:e0:d8:54:7d:63:1e:01:de:35:8e:9d:0d:3f:
fa:c9:6a:25:41:f5:f4:ec:c0:eb:ba:8e:d3:e9:58:
06:69:a7:63:fa:66:84:d5:ca:72:98:4e:cb:de:5f:
04:62:2a:01:47:13:df:b0:a5:a0:18:32:5d:2b:4c:
60:81:f7:18:64:f6:e0:18:5e:1d:6f:b1:51:02:88:
87:8e:f8:28:06:9c:be:48:64:1b:be:43:2a:73:37:
68:37:5e:67:d7:44:53:12:44:26:a7:45:ab:24:ee:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7646
17972
sbgp-ipAddrBlock: critical
IPv4:
203.11.128.0/21
IPv6:
2402:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
28:82:09:83:28:b7:a8:bf:07:e8:86:ad:49:b3:00:bb:a7:1c:
cf:e0:cc:42:94:5f:2d:91:c0:ac:64:6d:ab:ed:93:6d:11:99:
e4:9b:33:c0:ba:be:7d:0a:6d:88:ed:5a:1d:46:a5:54:ab:31:
14:b5:71:d6:28:18:b5:78:97:c7:3f:2e:c8:54:9c:32:94:cd:
57:ad:f5:fc:49:42:1c:53:0f:1d:97:85:c4:fc:04:2e:21:94:
4b:93:7b:fb:17:f5:91:bc:48:38:49:ce:13:9d:91:25:04:95:
61:bb:73:08:8e:e4:a7:8b:00:72:25:ed:9b:c1:c6:89:0a:2a:
5c:f0:7e:c6:d1:d4:5e:c7:64:58:4b:15:2c:e7:6f:83:bd:e1:
7b:47:5a:f9:f5:6f:a9:1f:0a:4a:e7:58:99:fb:06:ac:13:11:
05:e7:87:92:39:5d:31:99:b3:44:95:ce:18:66:6b:95:8f:53:
23:17:fd:11:01:93:17:e3:e4:2d:eb:c3:e5:b0:e3:bf:8c:e6:
31:f3:d3:31:58:15:84:b6:f5:c8:6c:b5:39:b7:33:9e:50:f1:
eb:10:d6:d4:34:a7:f4:11:b7:6d:24:f9:e9:0c:e2:d8:dc:8b:
c7:f4:72:b3:0e:80:79:9d:d8:e9:c7:32:55:5f:4f:d1:e9:44:
f8:dd:82:67
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgIDAeugMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQxNTIzMDYzMloXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4
Mjg0RURDODA0NzIwQjQ2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuFOEQMOkHMLDOzOay8wwcPMT3faAXG57r4vBWjklkhFm+svYkebNzwWN73B5+
V6TobN5nZQ3Aish3NmzcIieqvijlvSuRSzw987YHlolt09z9LSiAQc6z2b+NUmDU
nZ+E26EDfuL7dFFbTJWO93+58PVat7BJ8/WVRtqBeYKFdBmkGWdbuw95SA8+1qCd
Kb+bId9RzdcK4NhUfWMeAd41jp0NP/rJaiVB9fTswOu6jtPpWAZpp2P6ZoTVynKY
TsveXwRiKgFHE9+wpaAYMl0rTGCB9xhk9uAYXh1vsVECiIeO+CgGnL5IZBu+Qypz
N2g3XmfXRFMSRCanRask7p3pAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUi6wN0+SR
hYlP2uKChO3IBHILRhQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVCRkFFLzE2OEZGRDZDMUQ4QTExRTI5MEQwREVFMzA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1T
UmhZbFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHQYIKwYBBQUHAQgBAf8EDjAM
oAowCAICHd4CAkY0MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDywuAMA0E
AgACMAcDBQAkAm8AMA0GCSqGSIb3DQEBCwUAA4IBAQAoggmDKLeovwfohq1JswC7
pxzP4MxClF8tkcCsZG2r7ZNtEZnkmzPAur59Cm2I7VodRqVUqzEUtXHWKBi1eJfH
Py7IVJwylM1XrfX8SUIcUw8dl4XE/AQuIZRLk3v7F/WRvEg4Sc4TnZElBJVhu3MI
juSniwByJe2bwcaJCipc8H7G0dRex2RYSxUs52+DveF7R1r59W+pHwpK51iZ+was
ExEF54eSOV0xmbNElc4YZmuVj1MjF/0RAZMX4+Qt68PlsOO/jOYx89MxWBWEtvXI
bLU5tzOeUPHrENbUNKf0EbdtJPnpDOLY3IvH9HKzDoB5ndjpxzJVX0/R6UT43YJn
-----END CERTIFICATE-----
Generated at Tue Apr 16 10:34:25 2024 by rpki-client on console-fra.rpki-client.org