Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
File: n33tfQW4HeZsc1u4VH52BIycP1o.cer (raw, json)
Hash identifier: yd2At+rSyZOZ+GZympL6R3U4jpqH4C7iUxPoCOyILrU=
Subject key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B46F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Aug 2023 15:09:17 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 140875
IP: 103.152.194.0/23
IP: 2001:df4:1a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111727 (0x1b46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 15:09:17 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:c5:d8:d5:53:1b:03:e0:80:0e:39:c8:96:
f9:08:1d:7e:b9:a6:b3:0b:86:04:9d:63:11:32:bb:
0e:e1:8a:77:e9:03:9c:4c:2f:f7:36:f9:2b:68:77:
1e:6a:e7:55:ec:94:41:99:e8:d2:3b:d6:de:45:62:
ac:a9:a2:0c:f3:d0:21:b4:d9:29:05:40:42:01:21:
54:f5:2b:d3:73:3a:59:56:78:de:d2:68:b7:45:af:
62:60:57:14:a6:df:40:60:5a:c7:c3:21:8f:49:6a:
49:9f:3e:e9:ed:ac:e9:74:2e:08:3c:31:b8:7e:7b:
3f:dd:43:6e:fa:81:31:d4:77:73:35:8b:c2:4b:02:
44:9c:6b:48:d9:5e:82:e2:4d:e4:fe:4d:36:14:5e:
81:da:cf:a3:5b:dc:d3:19:70:b8:5e:34:57:fc:3b:
6b:18:70:ba:98:01:0f:31:00:b9:30:e7:07:cb:0c:
85:66:5f:06:8c:ac:ad:49:47:06:48:7b:27:e7:fd:
1e:ed:5a:17:17:7f:2e:28:c4:5a:99:46:eb:f3:f2:
d9:6e:b9:dd:34:6a:1d:7b:36:db:2d:d5:17:9b:79:
95:27:d3:c1:49:e3:da:aa:a6:52:54:6f:5e:21:01:
0c:ee:03:6a:4a:59:21:65:c9:f0:c2:d7:46:76:ca:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140875
sbgp-ipAddrBlock: critical
IPv4:
103.152.194.0/23
IPv6:
2001:df4:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
7b:80:1f:b2:83:17:75:bb:83:22:ad:7f:8f:dd:40:b5:e2:e1:
00:41:0c:44:cc:24:6f:51:26:3a:f6:86:f9:96:98:69:af:ee:
29:38:72:f9:45:5e:19:a3:10:37:d3:ea:07:12:fd:f9:d2:88:
a1:56:49:df:3f:32:18:83:62:b6:60:ba:cc:fa:b6:ab:24:e1:
07:3f:99:9c:b2:e2:21:9c:f7:08:8e:69:9a:15:45:85:84:4a:
aa:d8:f5:78:6d:8d:ad:ce:1c:e7:69:f5:59:bf:c5:f1:e2:c6:
39:43:79:25:51:76:bb:22:d1:f5:60:fb:1e:f1:73:0d:ae:a1:
55:2f:b6:59:7e:06:3c:b4:69:95:7d:18:8a:33:2a:d8:97:16:
91:f4:24:b0:98:1e:86:a0:03:0e:ad:7d:1f:8a:00:90:df:3a:
52:a7:15:97:64:73:de:9b:48:52:3a:44:5c:c2:f1:66:50:fe:
19:3c:72:2a:92:e8:ec:95:78:63:3e:17:64:9f:bd:37:72:a9:
10:38:a6:49:b2:c6:87:23:49:9c:88:4c:65:5a:08:9d:df:0d:
88:22:f0:06:1d:10:98:6a:2c:a6:69:9a:ff:a0:a0:7d:aa:07:
af:e0:91:c6:12:32:16:bb:3d:15:96:02:63:1b:3a:50:f7:4b:
b9:93:82:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:35 2024 by rpki-client on console-fra.rpki-client.org