Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.cer (raw, json)
Hash identifier: 6p1I1fqO5RBojo5lBHQ6rS90sbx1WaVN5BuAiw/tT6w=
Subject key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D45E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Dec 2023 13:18:31 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 63961
AS: 132106
IP: 103.28.120.0/22
IP: 163.47.36.0/22
IP: 203.96.188.0/22
IP: 2402:f500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119902 (0x1d45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 27 13:18:31 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:6d:96:17:36:05:1a:c0:13:ab:3a:d2:bc:
41:30:a0:79:63:e0:51:b5:d6:bf:59:d2:c4:e2:fb:
6e:60:65:72:c8:4f:94:05:37:25:1d:d9:d0:24:bf:
99:25:a3:6e:59:14:ca:77:9e:7e:34:43:cc:70:9f:
53:c8:81:d1:c9:84:22:1f:48:70:f8:44:a1:70:4c:
c6:d9:f6:03:85:e0:62:b4:ae:b3:b9:a4:bc:31:ef:
78:08:17:2b:23:78:56:35:88:5f:69:8d:fa:e3:52:
56:aa:b4:6f:ad:19:d6:98:46:9e:f7:cc:b0:b0:6e:
1d:9f:ed:51:83:05:01:15:74:8b:87:ab:73:29:60:
41:93:0b:64:e2:a1:96:eb:1c:f3:31:a9:37:23:74:
a5:e1:c3:88:2d:48:79:b6:10:fd:8b:59:fb:a0:5b:
da:76:51:78:11:7d:3f:0a:e7:dd:77:90:97:85:6b:
23:52:4f:cb:c2:65:56:7e:6f:03:00:a5:d3:b6:40:
40:2f:28:21:d5:24:79:99:e0:1e:d8:94:3b:7f:e4:
d9:c3:59:0b:60:e2:b6:b5:19:a9:72:2a:62:55:a9:
38:fe:3b:08:f6:f5:e4:8b:cd:47:73:c8:52:ce:f9:
c9:0a:51:f9:5c:30:be:20:6e:d0:e9:21:96:8f:1a:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63961
132106
sbgp-ipAddrBlock: critical
IPv4:
103.28.120.0/22
163.47.36.0/22
203.96.188.0/22
IPv6:
2402:f500::/32
Signature Algorithm: sha256WithRSAEncryption
b7:06:71:13:47:68:3d:ef:aa:41:72:23:40:3b:0f:82:89:59:
91:5d:e5:6d:3c:a7:35:6a:c3:ff:e9:7d:66:d4:a7:27:68:ec:
5d:18:a1:e6:41:af:02:39:e3:ae:7e:46:ab:b4:c4:19:1c:1b:
98:c3:2b:3c:95:f8:06:81:ca:1f:45:0f:99:e3:ef:5f:f3:1c:
f1:35:b5:43:84:2e:58:ff:07:33:0e:07:9f:a6:dc:e5:77:31:
e3:dc:04:1e:f5:77:3c:6d:77:ef:8a:0c:00:9a:b9:41:0f:e2:
c7:eb:fd:0b:90:63:56:8e:80:40:30:b5:d1:46:11:2e:22:2b:
d5:ff:e3:54:ab:2b:c8:dd:12:6e:a4:d2:e4:17:a9:ca:e1:fd:
82:4b:2d:b0:7a:a5:23:96:2c:eb:25:58:0f:40:15:1e:1a:c7:
d2:17:2a:6b:21:2b:fd:91:0e:3f:f6:b1:ca:84:3c:cf:26:12:
33:52:8d:cd:03:a1:27:5f:f4:f1:d6:5d:ba:f7:0c:d5:58:4c:
7f:64:fe:4d:02:79:7a:4a:b8:78:2c:cc:12:f6:e5:6e:40:8f:
80:90:04:7b:f7:7a:91:26:2b:8c:84:81:64:d0:1d:f4:5b:79:
e3:8b:8f:bb:e2:61:f6:a2:c9:ea:79:51:12:fa:f9:f4:d8:4c:
0d:9f:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:53:33 2024 by rpki-client on console-fra.rpki-client.org