Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
File: lMPujMByTro8sQMk-e24G6yFAyA.cer (raw, json)
Hash identifier: MH/COEi25XUcp6Yeg0He7CmBTfL8kzgqM684JXX838M=
Subject key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CA72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Nov 2023 02:48:20 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 152108
IP: 203.175.110.0/24
IP: 2001:df3:2240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117362 (0x1ca72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 13 02:48:20 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:f4:56:4d:8d:58:2e:ae:59:2d:8c:5b:d1:
6c:40:4d:5f:5e:47:2d:75:5a:0d:99:29:68:05:9c:
24:13:dd:29:a1:76:50:c1:b4:fe:94:3c:28:13:cd:
7c:da:a5:f6:32:4d:28:25:3c:ac:d2:e6:06:0b:b8:
cc:78:4e:0f:8b:92:ac:96:5f:7b:5d:0d:7e:7a:1f:
31:4d:25:5f:f7:7c:da:f4:2a:b4:64:01:94:b0:b3:
3a:3b:be:a7:29:99:a1:bc:94:95:10:4f:0b:e3:96:
8a:2f:ab:ff:07:ad:12:e6:9e:a4:a9:48:e6:4d:1e:
5d:9f:68:7e:64:91:c1:b3:1e:e3:df:76:81:b0:62:
cd:1c:54:a4:a7:3c:87:9a:69:ed:22:a2:13:dd:21:
ca:42:11:19:31:de:50:98:b7:1b:4e:3d:d8:1b:ad:
e5:40:42:11:b2:a2:47:bf:45:a3:98:bd:9b:3b:a0:
67:81:ed:e7:06:87:0f:51:62:88:e6:27:04:07:0c:
30:67:21:d8:58:ef:13:12:8e:90:2a:7c:40:11:cd:
70:b5:9e:11:8a:ce:ea:8e:7d:d9:06:54:ab:02:ae:
1d:d8:1f:2b:49:12:3b:33:72:bf:cd:0d:e3:e8:8e:
7d:9f:41:1f:6b:f2:c9:4b:99:7c:8b:3a:a6:9d:2f:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152108
sbgp-ipAddrBlock: critical
IPv4:
203.175.110.0/24
IPv6:
2001:df3:2240::/48
Signature Algorithm: sha256WithRSAEncryption
4d:4c:22:df:58:0c:72:fb:d8:8f:2d:7f:95:31:cc:72:e9:47:
df:3c:c4:53:84:f7:74:a3:cc:71:77:87:1c:5b:e3:20:00:f1:
59:36:fd:b0:9b:4f:71:9d:ab:9e:14:f2:ec:d8:c8:6f:0a:f1:
d3:82:f5:ff:5e:70:d1:a8:54:6d:de:fa:80:95:24:6e:3e:91:
81:5c:87:39:54:c0:86:ef:0e:27:e5:89:ae:31:f2:50:98:46:
ca:f7:10:30:ab:a3:23:8c:91:25:5b:1a:b5:25:a5:64:66:34:
fd:ec:11:39:1b:c4:8b:a3:63:a2:5a:b8:2d:20:b3:1f:f6:61:
42:63:a3:9a:27:be:df:9a:8a:dd:f5:3e:13:2c:f7:21:17:07:
3d:c3:74:67:7e:6e:8e:25:e1:3c:20:0a:cf:6d:a0:11:bd:d3:
53:7f:ca:89:19:9c:cd:20:a3:7c:07:38:f7:72:e0:fc:0b:df:
16:fc:62:99:38:5c:97:b6:a8:b2:f5:66:9a:42:a7:9d:06:25:
a7:e6:60:36:46:47:07:81:69:e1:d1:ea:54:38:ec:1d:e3:32:
f9:c0:f9:17:0d:95:20:39:2d:87:61:76:56:b2:b3:27:bb:c4:
90:29:98:27:c2:fe:a8:32:fd:93:01:67:39:02:5b:27:61:f5:
a7:1b:f2:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 05:58:36 2024 by rpki-client on console-ams.rpki-client.org