Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
File: mdb3fuCkNuVIfpjO5VK2S17GWxM.cer (raw, json)
Hash identifier: 2ssdgXqqAvCXYnuH+8x+TY8NtLRPSyFKa0yUVFXajWM=
Subject key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C108
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Oct 2023 13:10:38 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 55748
IP: 103.7.198.0/23
IP: 103.8.88.0/22
IP: 202.52.38.0/24
IP: 202.52.154.0/24
IP: 202.59.234.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Apr 2024 04:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114952 (0x1c108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 13:10:38 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:7b:c5:60:93:f9:da:08:49:8e:cf:cf:26:
60:e5:b8:9c:e2:fb:7b:99:83:bd:8d:1f:ef:24:84:
ca:e8:21:9e:0c:5a:de:b1:89:7c:4d:29:9e:62:2c:
81:08:f0:f3:5a:bd:39:81:a8:07:e9:55:ee:41:9e:
0c:50:c5:22:0f:00:dd:e5:9b:36:1d:a5:73:bf:c1:
64:a3:de:46:74:1f:2a:67:6e:f5:0b:c1:44:3c:93:
63:22:cf:1c:1e:61:96:3d:42:42:3e:eb:32:3e:a7:
d0:54:c8:6b:8f:15:e3:6e:a6:ba:f6:3b:ee:45:ae:
97:d5:e8:b5:89:f7:8a:fc:09:94:c9:ab:24:e9:53:
1c:d0:97:06:25:3e:0f:4e:3f:d8:e4:dc:69:94:d5:
68:d3:a9:59:61:5c:09:86:7b:6c:c7:71:85:ea:d4:
d2:f0:a4:d2:3b:04:ea:70:61:9c:a7:56:ed:c6:ad:
94:18:35:c2:70:39:b0:72:10:da:c5:a0:1d:20:d6:
46:a4:c2:dc:0a:b6:fe:20:dc:5f:8c:94:9c:34:70:
b1:fa:21:c4:0c:c8:76:f8:bc:f7:2b:59:05:80:4a:
b1:0f:15:33:f5:cb:c8:b7:d0:1c:7f:9b:96:01:77:
c4:c4:61:0d:eb:48:17:d7:0c:50:c3:71:90:72:e0:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55748
sbgp-ipAddrBlock: critical
IPv4:
103.7.198.0/23
103.8.88.0/22
202.52.38.0/24
202.52.154.0/24
202.59.234.0/23
Signature Algorithm: sha256WithRSAEncryption
59:24:a7:55:f8:c9:fc:1a:e1:7d:bf:da:2d:f2:5b:ac:42:74:
e9:64:ae:37:89:c5:9b:ed:77:e1:df:bb:32:f3:ed:6b:43:00:
95:27:a0:14:43:aa:44:f4:b6:44:5a:11:ba:7b:c9:dc:4e:2e:
f6:e5:02:f5:d6:0e:8e:44:2a:4a:39:9c:c1:64:d8:79:de:45:
79:89:a1:6d:1b:55:e8:f9:a1:62:6d:4c:e2:7e:0b:3e:9d:4b:
3f:09:b1:6a:58:86:3e:47:9d:9e:79:b5:e8:6e:bf:e2:63:6c:
69:aa:0e:28:b1:39:a4:0f:07:84:a9:7c:83:ca:aa:b2:42:6a:
9f:96:0e:14:8f:1a:2f:04:7a:12:60:10:0c:0d:d7:a0:07:dd:
a0:40:db:f1:07:0c:e5:e6:a4:50:26:f4:79:c7:00:4e:2a:54:
4e:db:45:c6:fa:ee:1e:13:9a:b4:d0:f2:1d:27:15:11:aa:f1:
49:86:d0:c2:df:d8:78:5c:d0:f2:82:c4:43:aa:12:f7:73:98:
25:bc:87:20:fa:db:ce:f9:75:63:d2:0c:8d:1c:6a:fb:46:64:
1e:5f:c0:09:51:ca:ec:28:5c:aa:db:54:c8:e0:67:42:46:f5:
71:7f:2b:2b:99:79:ba:2d:ed:ab:5e:a0:76:e3:d0:7e:d8:d8:
e4:70:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:37 2024 by rpki-client on console-fra.rpki-client.org