Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
File: kSlbu3W_quuVMbObNux1Id3jDWM.cer (raw, json)
Hash identifier: 3R1f1HgemhHFhGdiWoxOW/wQmaAXZkDFUXKDgt3ObLc=
Subject key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CF46
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Dec 2023 20:54:59 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 139601
IP: 103.96.80.0/22
IP: 103.131.130.0/23
IP: 2401:3a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 04:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118598 (0x1cf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 2 20:54:59 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:e9:5d:17:4a:06:4e:5f:a2:6f:1c:54:8c:
f7:97:d3:66:ab:5a:c1:b4:61:30:32:e0:e0:46:31:
6d:0a:bf:e7:ce:4d:d2:46:bd:b1:95:9d:4f:4c:4d:
47:29:93:be:4c:8e:93:68:10:24:76:16:21:cd:c9:
d3:b6:d1:4f:70:3c:6b:15:fe:98:7c:62:b5:f6:e3:
64:4e:41:3e:5c:5b:f9:db:33:b1:6e:8f:2d:be:e4:
8a:3d:c6:1d:ce:3d:52:1c:de:7e:b8:c4:9a:cc:d4:
ff:48:34:bf:31:c3:26:9c:73:e6:69:cc:22:48:cf:
fc:77:35:e5:a1:d2:77:31:c2:fa:4d:47:98:5e:f5:
d4:4d:20:51:82:b8:a8:95:ee:2c:2b:87:01:79:4e:
81:7b:ab:81:08:31:ae:ab:1e:6d:59:07:62:42:f0:
5e:d1:f2:91:2f:fd:36:77:c9:c4:03:a7:9a:88:56:
8b:4b:05:1d:08:37:50:aa:24:b6:73:97:d5:54:23:
c5:48:b0:08:ff:51:d4:2d:3b:d2:91:2a:56:21:09:
27:65:38:8b:b5:ed:cd:06:21:50:ba:a0:ab:56:b0:
58:84:77:9f:cf:f3:f6:0e:72:86:76:2b:6c:bb:5e:
6f:64:3e:2b:0f:ad:f6:01:e6:e3:14:ae:63:67:c8:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139601
sbgp-ipAddrBlock: critical
IPv4:
103.96.80.0/22
103.131.130.0/23
IPv6:
2401:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
c0:6c:2e:27:0b:1b:1d:39:3a:75:f2:e0:f7:4a:ce:68:6f:97:
7c:41:46:51:09:80:4f:35:9b:ac:91:8b:8e:46:69:ab:34:fd:
9e:9d:91:75:a5:5d:12:16:6a:b2:4e:ba:ab:6e:0d:00:44:07:
e3:c6:69:15:dc:77:c9:31:f3:eb:f6:38:06:d4:f8:d3:e7:7c:
b1:30:82:e9:b4:88:d1:5f:ce:37:63:93:15:77:b2:76:ae:51:
10:6c:a5:32:a6:70:4c:e5:b3:47:a3:8a:c0:f7:b4:f8:33:60:
a6:14:ab:db:aa:3f:7b:87:b4:28:ad:1d:dd:80:3a:6f:d3:93:
4d:6b:f9:f9:c9:99:fd:87:22:fd:7f:b5:d7:b3:13:36:10:49:
8d:e5:2e:81:0b:21:51:09:00:74:54:e1:1d:4b:a8:d6:77:b4:
98:2d:26:ea:7a:6d:4f:f9:70:aa:c3:40:7b:71:8b:e0:d2:34:
e9:f6:e3:1e:a3:8c:21:23:48:26:75:2d:eb:4d:1b:70:2d:d1:
bf:64:f7:9b:51:c0:bf:02:91:67:08:63:5e:3d:0e:15:20:14:
06:36:9a:00:0d:5d:dc:ff:7c:68:f0:8c:80:ff:0b:e5:32:c9:
ae:18:59:4a:dc:9c:90:c3:64:09:ad:4c:50:64:c1:46:06:9b:
2e:fd:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:11:04 2024 by rpki-client on console-ams.rpki-client.org