Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
File: iNHJlOgQj8ClM99LuOLOjRxLnxc.cer (raw, json)
Hash identifier: X9lKCJZPwE8ji2u90mmQNsHdsSujkN5n7L6aNztjso8=
Subject key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C9F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Nov 2023 12:37:57 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 131324
IP: 45.64.244.0/22
IP: 103.242.108.0/22
IP: 2401:9c80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117239 (0x1c9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 12:37:57 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:a8:d9:6b:27:e4:77:96:14:c9:31:b2:53:
af:ab:72:42:93:27:52:aa:0a:9b:2c:c0:a1:a0:00:
62:79:39:a4:4b:3f:36:5c:ee:32:c9:aa:b7:8b:d4:
6d:33:a3:5d:48:8a:4a:7e:43:2c:13:86:54:94:cd:
0e:1e:7e:78:48:ff:6b:21:73:19:cf:d5:ad:a0:d5:
8f:f1:6e:31:06:ee:47:47:21:31:a0:94:af:15:a0:
59:e7:18:55:ba:c9:df:d2:10:be:6f:a8:84:f4:43:
f1:81:76:77:65:5b:c2:f7:7e:cc:88:7a:58:7a:19:
3b:2c:53:5e:14:a3:4b:bd:d2:9f:18:d1:dc:9f:41:
32:7e:9c:1f:04:2b:88:c2:b2:1e:07:1e:26:86:07:
64:11:94:de:f8:64:59:df:6d:2f:6c:9c:fb:32:50:
28:8a:38:b1:3e:67:a1:f0:54:3a:2b:73:7a:95:05:
2b:5e:fb:3c:6c:da:42:99:e4:8e:28:32:f9:07:e7:
d0:ac:ca:8a:15:98:fb:61:11:69:a6:b2:fc:ed:fa:
c6:6f:d6:72:29:53:35:fc:02:86:a8:c2:c3:d2:6e:
e8:54:bf:2b:93:a5:43:42:32:20:f1:c0:d9:47:c0:
bf:5b:6c:85:e2:b6:18:49:c6:3a:73:79:07:0a:f0:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131324
sbgp-ipAddrBlock: critical
IPv4:
45.64.244.0/22
103.242.108.0/22
IPv6:
2401:9c80::/32
Signature Algorithm: sha256WithRSAEncryption
52:29:77:97:65:5e:b8:da:28:ad:da:ea:60:84:73:80:2c:8a:
da:42:0f:5b:92:df:c5:35:56:0f:42:5c:0c:7f:6f:7d:d7:74:
27:dd:d9:4b:ec:9c:dd:cd:47:24:84:85:b7:f5:7b:4c:16:82:
17:12:38:e7:b5:8b:3e:af:4c:53:1a:24:ef:df:a0:33:1d:87:
a6:43:8c:13:5f:7a:d7:4e:96:08:9a:e6:a0:4e:a0:02:55:47:
f6:8d:c1:a4:22:bc:a3:40:17:7c:b5:8e:7d:72:08:11:8b:89:
1d:8d:b4:32:24:58:9a:ea:0c:63:62:d5:e3:a4:a8:ae:0f:a1:
ee:49:ed:b5:b2:31:23:d2:eb:52:2a:e5:f3:97:83:d1:a1:75:
00:87:f9:3b:c8:be:09:e9:5b:9c:bf:ec:30:c9:bf:5e:5f:d6:
05:6a:83:58:34:bd:a5:7e:f4:65:9a:bb:61:13:7c:60:af:79:
5c:c0:38:34:bd:04:15:1a:1e:ab:60:1b:16:34:20:6a:12:bb:
c1:24:ee:99:c4:4f:57:d8:4c:96:53:e9:0d:9f:c4:ef:fc:0f:
3c:fb:16:64:c7:b4:d6:a7:47:94:d6:3a:ef:cf:f5:df:3d:d5:
c5:1b:15:81:d6:a8:b3:32:8c:d8:04:82:0a:ff:33:a7:f4:44:
7f:b4:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:58 2024 by rpki-client on console-ams.rpki-client.org