Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer (raw, json)
Hash identifier: 7uQmF+vk0e1K6HT9tlX8akU1tbXP6BMSAuyu1+0IAeQ=
Subject key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CCE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 26 Nov 2023 15:03:50 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 148975
IP: 103.175.20.0/23
IP: 2001:df7:e880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117985 (0x1cce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 26 15:03:50 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:d6:77:e5:86:4e:3a:14:4b:d5:61:19:e8:
26:16:8e:34:cd:d4:9e:99:2a:a3:0d:5d:39:71:9e:
e1:c4:f2:f4:ae:32:96:ad:1b:8f:ea:62:6f:50:36:
d7:0f:2f:78:f6:26:69:28:92:02:f9:22:66:79:f1:
b6:4c:b3:25:3b:51:13:14:ee:b2:89:f3:d0:7b:57:
41:32:b7:1b:c9:5a:15:ec:7d:a4:58:7c:d1:47:1f:
16:74:ac:4c:7d:08:01:b3:e4:d8:b7:6d:8a:a3:10:
77:88:2f:03:2a:52:5a:84:f1:84:3b:de:53:11:15:
d6:11:37:37:f8:b0:bb:33:10:6e:8f:da:79:9c:4d:
68:f2:a5:e9:bc:df:30:a1:06:75:91:4a:28:0a:ce:
d1:bf:0c:b7:9c:6e:eb:db:cc:b2:ab:d9:c3:aa:9b:
2e:c8:1f:46:e1:1b:7c:7d:6a:c6:d7:11:38:8d:b7:
3e:7d:07:f5:75:f8:e2:76:3c:69:cf:b7:39:f6:f2:
62:6f:69:aa:e9:df:ef:29:83:be:1c:4c:ff:83:90:
31:44:1a:8a:95:1a:c9:24:f9:d2:02:38:ea:55:2f:
7d:9c:72:dc:1e:0a:6a:4d:f0:58:d7:03:b9:ad:93:
4d:8f:6c:f4:1f:d4:a8:3e:42:e7:b5:c1:d9:16:69:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148975
sbgp-ipAddrBlock: critical
IPv4:
103.175.20.0/23
IPv6:
2001:df7:e880::/48
Signature Algorithm: sha256WithRSAEncryption
aa:0d:46:c4:aa:2a:20:0b:20:ea:af:29:b3:e5:8f:2c:4c:f2:
a4:5a:d2:77:6f:bc:16:e6:e8:05:c8:9e:5d:b3:3e:3d:f8:7a:
03:66:ea:c2:99:1f:b4:c2:61:7b:c6:85:de:76:e0:93:97:4b:
06:40:01:19:9e:9c:3e:a5:4e:c8:f7:6e:83:83:32:79:ed:e8:
ec:8c:bc:5d:23:ab:52:71:41:72:5a:cd:ed:3b:79:af:bd:d5:
b1:cb:d7:05:36:9c:d6:e1:50:bb:ec:05:3c:5c:b7:5f:61:7d:
ac:4e:4b:77:5e:96:ff:ac:3f:03:27:fc:82:ef:a1:97:61:f0:
5d:7b:a6:4e:f4:3d:0b:ec:6d:a8:ab:57:d0:54:bf:71:d4:2c:
ee:8f:2f:5d:54:31:1b:72:26:ea:30:43:41:14:48:cf:3c:3a:
7a:05:ec:10:bb:cc:87:c8:5d:5b:73:db:d6:70:6d:61:2b:97:
08:30:d9:6a:36:75:19:f2:2a:6e:fc:cf:45:35:35:f4:61:ba:
b6:01:ab:45:5d:c3:cf:a2:8a:63:65:fd:d9:2d:10:37:d9:0d:
8a:dd:26:de:b8:a7:db:d2:97:72:a5:33:d0:1c:ac:03:40:5b:
2d:63:20:a4:73:da:7e:cc:7d:60:ab:4f:43:15:ff:32:2d:ee:
1e:85:4e:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:56 2024 by rpki-client on console-fra.rpki-client.org