Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
File: njXlPupre8PsKa87NiDpplTAtqw.cer (raw, json)
Hash identifier: V3+Z+3jl/ZCLSp1tbn9Q9E79T8g6A0+aKEJit8oJeMM=
Subject key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020477
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Aug 2024 12:34:12 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 137398
IP: 103.167.80.0/24
IP: 103.169.208.0/24
IP: 2001:df6:ab80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132215 (0x20477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 12:34:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:f0:7b:28:d9:5a:f6:cb:cd:9e:b4:98:d7:
ec:0f:25:be:6c:5f:fe:5b:1b:b9:b7:18:06:af:92:
fb:47:f0:e8:11:38:3e:df:32:c1:eb:6c:73:4a:97:
8b:84:e8:5d:d3:78:1a:3e:6a:50:7c:61:56:09:89:
52:1a:d8:3c:59:7b:45:73:06:bb:83:5e:ca:a7:69:
d6:fc:5f:27:63:06:fd:76:90:a4:56:e2:97:56:a8:
1f:80:f2:26:09:78:6d:1f:ad:dc:91:6f:17:33:12:
28:63:4e:35:bd:d5:4d:cd:3a:a4:9a:9f:e1:02:fe:
b7:03:ec:8f:ba:58:1b:41:66:ef:0d:4d:30:56:b4:
48:6e:59:d2:f3:17:ac:5d:a4:07:2b:57:98:38:95:
bc:36:e9:4b:20:c4:fd:49:76:72:6f:8d:c3:70:05:
c3:22:5c:ad:b7:aa:11:32:a0:f8:2c:4b:76:f0:bb:
bc:c4:5d:df:7b:83:94:dc:e8:84:87:d7:e5:3e:c4:
6c:0e:ec:55:07:4d:b2:27:b0:ca:3a:9b:8b:20:43:
be:83:85:12:42:36:86:2d:0b:fc:f3:7d:95:57:43:
78:82:db:9b:38:ee:98:9d:e3:a7:54:e7:d7:18:66:
80:e9:bd:29:48:fc:79:68:de:00:82:0d:11:c2:41:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137398
sbgp-ipAddrBlock: critical
IPv4:
103.167.80.0/24
103.169.208.0/24
IPv6:
2001:df6:ab80::/48
Signature Algorithm: sha256WithRSAEncryption
6f:60:54:8e:66:12:cc:64:2c:76:ea:f6:ff:93:cb:d5:45:ae:
1f:8a:14:e5:73:35:76:0d:4a:bf:02:46:6b:4c:c7:e9:08:a6:
fe:35:15:11:60:dd:e8:27:66:66:5c:d0:19:19:a0:43:ca:24:
dd:e1:64:4f:68:9a:89:61:0d:0a:e1:ed:6a:7e:7f:54:3e:62:
03:ec:b5:6f:0b:74:fa:66:8e:7e:b5:54:ff:45:35:a4:59:3d:
1a:cf:2a:35:52:3b:46:48:5f:5a:ed:15:a1:0b:32:52:84:7c:
64:92:14:1d:23:e3:99:9e:ca:52:89:48:a9:ab:8e:4d:3d:8b:
c5:d2:ff:01:bc:95:38:90:54:46:87:97:cc:f4:72:07:c4:76:
f8:b9:46:e0:a0:20:db:d0:a6:b8:07:46:64:55:08:7b:84:c2:
00:48:99:14:a7:19:18:c4:5a:29:1c:a5:4b:45:fb:87:2c:f7:
70:02:f2:4a:dc:73:7f:4d:dc:a8:3d:f1:03:9b:52:be:f0:a7:
0b:76:d8:9d:67:87:22:bf:1f:d9:b8:0d:25:69:94:35:ec:06:
62:f9:be:ed:b7:43:e5:cd:c3:e2:f4:e2:53:fc:18:85:07:2d:
d9:07:60:70:67:20:32:13:cc:3d:b7:6a:13:af:27:e7:0b:70:
55:f7:de:6f
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAgR3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgwMjEyMzQxMloXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYz
QjM2MjBFOUE2NTRDMEI2QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBUfB7KNla9svNnrSY1+wPJb5sX/5bG7m3GAavkvtH8OgROD7fMsHrbHNKl4uE
6F3TeBo+alB8YVYJiVIa2DxZe0VzBruDXsqnadb8XydjBv12kKRW4pdWqB+A8iYJ
eG0frdyRbxczEihjTjW91U3NOqSan+EC/rcD7I+6WBtBZu8NTTBWtEhuWdLzF6xd
pAcrV5g4lbw26UsgxP1JdnJvjcNwBcMiXK23qhEyoPgsS3bwu7zEXd97g5Tc6ISH
1+U+xGwO7FUHTbInsMo6m4sgQ76DhRJCNoYtC/zzfZVXQ3iC25s47pid46dU59cY
ZoDpvSlI/Hlo3gCCDRHCQVTrAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUnjXlPupr
e8PsKa87NiDpplTAtqwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3N0E4L0JBNTI2MTM4RjExNjExRUJCMEUzQzc0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExNzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVw
cmU4UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhi2MDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ6dQAwQAZ6nQ
MA8EAgACMAkDBwAgAQ32q4AwDQYJKoZIhvcNAQELBQADggEBAG9gVI5mEsxkLHbq
9v+Ty9VFrh+KFOVzNXYNSr8CRmtMx+kIpv41FRFg3egnZmZc0BkZoEPKJN3hZE9o
molhDQrh7Wp+f1Q+YgPstW8LdPpmjn61VP9FNaRZPRrPKjVSO0ZIX1rtFaELMlKE
fGSSFB0j45meylKJSKmrjk09i8XS/wG8lTiQVEaHl8z0cgfEdvi5RuCgINvQprgH
RmRVCHuEwgBImRSnGRjEWikcpUtF+4cs93AC8krcc39N3Kg98QObUr7wpwt22J1n
hyK/H9m4DSVplDXsBmL5vu23Q+XNw+L04lP8GIUHLdkHYHBnIDITzD23ahOvJ+cL
cFX33m8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:47 2024 by rpki-client on console-ams.rpki-client.org