Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
File: jnhDSe8t33hXX9VMx47YxFyXbL8.cer (raw, json)
Hash identifier: Gp9zjbzky49thRp3lNkWRdwwZ8a9avVCCalZUyUKUd4=
Subject key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A08
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 18:51:10 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139750
IP: 45.253.248.0/21
IP: 103.144.140.0/23
IP: 2405:6e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137736 (0x21a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 18:51:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:9e:09:83:61:01:97:db:c3:ba:20:73:55:
43:ea:ec:fb:ab:2a:38:4a:0a:1b:10:77:99:ee:5c:
98:cf:2c:74:b3:75:bf:a1:8f:de:46:7a:bc:92:a5:
1e:df:7a:72:d8:10:3c:84:dd:3d:41:fd:e5:9e:61:
28:14:b3:06:52:0b:15:5f:9f:fa:29:9b:98:2a:68:
b1:9f:cc:4c:29:eb:dd:79:ad:33:fa:cf:2b:40:e5:
3a:c0:87:c0:48:31:65:fe:8b:43:5f:95:8d:3e:8c:
ca:3c:3e:7d:32:1e:aa:7d:6c:91:2c:2b:b0:59:29:
74:9a:b3:41:7c:66:b8:eb:ba:8c:aa:90:dd:48:df:
10:ff:a5:0d:5f:a7:37:53:6d:db:f9:2b:55:a8:c1:
e5:77:0b:f9:af:4a:b5:77:88:c6:1f:59:85:85:1a:
47:64:3d:07:3c:3a:66:a2:d1:10:c3:3e:e8:c2:a8:
31:b7:f0:33:67:9d:6b:cc:14:bc:d2:72:4c:81:b9:
0a:d7:a7:4b:4e:c7:af:b3:08:02:8b:27:85:eb:70:
dc:9d:ef:3d:49:38:0d:64:01:9b:53:4b:a8:2d:83:
fe:40:4b:b0:4d:08:7d:f3:fb:55:4f:1a:e6:2b:e6:
33:d6:d5:ec:56:a6:67:e6:bc:a5:63:ff:16:4d:ad:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139750
sbgp-ipAddrBlock: critical
IPv4:
45.253.248.0/21
103.144.140.0/23
IPv6:
2405:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
94:7b:64:73:62:b1:8f:d1:ba:06:2d:4a:08:14:0b:74:51:de:
52:1a:c1:3f:eb:b7:ef:48:b3:3e:0f:35:c2:b1:74:ec:26:41:
f3:49:6d:bd:a6:02:da:4f:9a:45:89:58:93:e2:3a:9d:a0:90:
a9:94:f7:af:74:30:f5:f0:e3:0d:bf:4b:9d:bf:db:57:18:40:
0c:f7:65:c9:75:50:86:ca:f5:75:91:39:6d:45:7b:f5:27:cc:
0f:03:f4:f4:cc:b5:8e:5c:16:1e:0b:c7:81:ab:ee:4a:2c:36:
e0:d7:31:ee:89:c8:41:a5:ea:3a:0a:04:5e:9d:72:f2:3b:af:
26:bb:26:1a:fe:a2:6b:51:6e:0d:dd:54:20:39:01:0f:a1:7d:
14:bf:8a:62:7e:27:21:2e:f8:26:ec:b7:d2:6d:f1:49:e9:d0:
b9:d7:6a:a2:87:57:35:08:58:74:03:01:42:a9:f6:71:57:b8:
55:6c:98:c9:24:c4:b5:37:5d:7d:3f:b0:51:d2:2a:ac:9f:04:
f4:eb:64:b8:45:1d:44:0f:16:39:c4:81:76:2f:d7:1d:5e:30:
0d:bb:06:96:50:c4:5f:5b:8d:d0:c5:08:8e:cf:47:68:df:36:
f9:45:e8:9d:3d:06:a3:a5:2c:a7:6c:84:cf:66:9e:4a:ef:7a:
9b:e5:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:57 2024 by rpki-client on console-fra.rpki-client.org