Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer (raw, json)
Hash identifier: 0RdHM67NI1gWGsineDSRFS7aOjiIjavlet0i3qSSn78=
Subject key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C610
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 18:16:41 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 138545
AS: 148972
IP: 103.175.14.0/23
IP: 2001:df7:e580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 17:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116240 (0x1c610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 18:16:41 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:a9:1e:c9:39:24:ac:18:a0:e8:3a:c7:1a:
8d:fa:e1:7f:89:a3:2b:35:bc:84:6c:62:7e:a2:08:
ad:76:b8:42:f0:51:55:49:82:73:e8:29:b2:f6:7a:
1b:2a:b7:a3:58:07:06:8e:a4:0d:53:75:47:55:4f:
d7:e4:f9:ab:70:e4:9f:6c:49:4d:66:71:1d:36:64:
eb:3e:7e:64:13:99:06:53:de:53:90:be:23:59:1a:
0c:7a:76:24:4b:2b:98:af:33:40:a5:07:c6:33:93:
23:d0:b6:71:7c:bb:33:71:4f:1b:47:c4:d0:e8:e6:
54:8d:86:88:8e:0d:62:dd:3b:e8:27:39:c2:de:5a:
b7:b3:d8:26:5a:00:ed:69:19:d7:14:e3:a6:58:22:
f3:8d:c0:70:0d:f2:e5:db:ad:1f:7c:b4:91:22:35:
28:98:fd:9e:c0:5f:5f:fc:26:23:43:ea:9c:5a:ed:
11:89:30:81:b0:c7:1d:b1:e5:4e:3d:8b:20:d2:29:
80:50:42:0c:5c:b9:8c:d9:2d:c1:e4:3a:0f:e2:1d:
c6:f0:ee:28:35:77:e0:06:a2:ff:ac:b0:54:5c:57:
ab:41:7d:48:97:40:27:5c:05:f6:a9:f1:73:36:47:
f6:e7:f0:69:97:34:01:49:6b:ff:6b:50:fb:f2:94:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138545
148972
sbgp-ipAddrBlock: critical
IPv4:
103.175.14.0/23
IPv6:
2001:df7:e580::/48
Signature Algorithm: sha256WithRSAEncryption
c3:7a:a5:8a:26:1d:58:67:d9:b9:bf:db:27:a5:b5:a5:32:36:
56:17:f7:d0:ed:1a:90:cf:b4:f0:33:86:82:be:c4:79:68:df:
cd:f0:69:00:98:a3:a6:25:67:c7:13:90:f6:ea:48:d3:55:fe:
b7:c9:62:26:98:f0:3d:7f:61:9b:41:5b:4d:53:c4:e0:8c:a2:
c1:38:5f:fc:00:79:e7:5c:65:58:e6:22:c2:a6:c0:8b:34:a8:
db:ad:85:ab:86:7d:bb:b9:9a:79:99:aa:6b:3a:b7:23:69:d4:
47:e2:69:c2:30:d9:2e:9b:16:4b:a0:c6:1e:34:d6:95:22:1e:
47:98:1f:df:0d:da:ad:1e:a0:5e:5c:06:f6:cd:06:ce:52:70:
9a:f5:64:93:f2:b7:63:b3:7c:f5:92:86:70:43:57:82:c2:d5:
22:9d:3b:61:0f:66:9e:2e:4c:6a:15:1d:8a:e9:12:84:5d:54:
d8:8d:28:ee:7c:65:a3:ab:70:9a:6a:28:d9:0e:90:c8:b3:dc:
69:45:0a:d5:99:6b:a4:f1:48:5f:43:44:4a:34:d5:d5:30:b1:
9d:7b:64:83:4d:00:95:6b:24:f5:c1:7d:c0:65:11:9d:24:78:
70:c9:68:d7:cd:6a:05:eb:eb:34:5f:4e:56:c6:26:87:7a:0f:
fe:b5:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:31:33 2024 by rpki-client on console-fra.rpki-client.org