Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer (raw, json)
Hash identifier: h9pwrhPw4QjNxWUjulT8mfFT5N4rUJGg+w2KWMzM50I=
Subject key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D2CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Dec 2023 02:02:38 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 149026
IP: 103.176.218.0/23
IP: 2400:35e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119501 (0x1d2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 19 02:02:38 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:53:dc:a8:1e:05:77:06:e6:2d:6a:a3:58:
70:c5:2a:e8:f7:ff:62:6f:28:bc:8c:ad:2c:42:5d:
9c:1e:0f:1e:e6:37:50:02:63:a0:dc:96:42:d8:94:
27:47:8c:1f:4b:d5:a5:37:11:6b:1b:59:5b:98:47:
be:28:fa:8e:87:18:17:65:81:fd:ef:ac:cb:22:e8:
4a:c7:08:e1:1d:b2:5a:17:8a:8b:48:01:8e:16:e4:
03:0e:40:8a:9f:71:53:71:f1:31:34:ea:6e:bc:b2:
9f:04:1f:46:d9:4d:0e:07:c5:fe:3d:25:5a:b9:16:
cc:f6:45:8f:4a:b2:55:da:32:17:13:97:68:06:63:
5d:60:22:3c:47:7c:df:2f:b7:4d:70:69:5a:3f:b6:
48:c0:17:a5:46:83:8d:82:a3:fe:5d:85:1a:0a:ec:
04:47:b1:0e:d9:91:09:60:35:47:b5:ea:c4:d1:3a:
a5:ea:94:00:13:8c:d9:94:06:f6:df:13:45:17:e2:
45:d4:d6:e2:bf:69:e1:0c:6a:c4:98:99:d1:9d:af:
fe:d5:c9:0c:6e:8b:d3:4d:e1:aa:b5:5b:06:4b:e9:
24:a3:d8:48:0d:b2:3d:52:d9:1a:88:d5:b4:02:24:
63:ab:6d:1e:e8:e6:37:73:59:e8:85:37:c7:95:3d:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149026
sbgp-ipAddrBlock: critical
IPv4:
103.176.218.0/23
IPv6:
2400:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
03:f5:61:89:69:99:f8:7c:14:df:cc:ea:68:13:f4:73:b2:1a:
d9:90:b6:e0:d4:29:be:ce:6e:59:33:b9:df:64:92:1e:79:71:
af:a1:cd:fe:53:5d:1a:a0:ba:5d:f9:80:df:c7:28:24:f0:cb:
14:47:f2:5b:5d:a3:66:11:fc:a9:5c:b5:0d:63:9f:d6:5b:4a:
2c:ad:6c:44:d7:71:6c:db:47:71:6a:f4:ef:01:cf:81:73:ae:
82:d5:45:fa:58:91:b5:0c:af:7b:fd:89:d2:ea:fd:34:3d:7b:
01:cd:cc:97:cf:f9:40:54:50:95:9c:06:d4:59:57:0a:12:01:
8b:87:99:34:09:95:6e:20:9d:f5:d4:56:28:68:12:7d:b0:f2:
29:a8:82:83:aa:be:71:8c:09:05:5f:1e:33:86:61:1c:0c:28:
2a:ab:ea:15:56:42:ce:df:f7:6c:5b:5c:ee:4f:0f:d7:a7:4c:
eb:ec:22:8c:14:92:40:26:a1:66:28:a9:4d:39:04:00:7c:19:
97:23:f8:5e:44:db:ea:56:4b:2e:b2:7a:dd:20:26:b6:68:a7:
5b:8e:9a:17:cd:f4:7e:d3:82:c0:e4:8f:60:7a:f9:50:fa:45:
af:80:79:77:83:81:bf:a0:7b:6b:07:cd:f9:d8:3e:b5:42:2a:
40:db:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:00:00 2024 by rpki-client on console-ams.rpki-client.org