Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
File: peMSM_m0rMgiKz_WfG288kF5CbE.cer (raw, json)
Hash identifier: UvVV8fnGL9Bhv0xnlSR2vFZolubZ4xLzqv897h6/8nE=
Subject key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A5AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 28 May 2023 20:40:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 138944
IP: 103.137.142.0/23
IP: 2405:6340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 17:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107950 (0x1a5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 20:40:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:79:d4:a4:42:ee:0b:b4:9d:89:ba:aa:07:
85:32:73:39:1f:00:07:0a:05:47:34:d9:b3:de:93:
1a:f4:2a:e2:2c:a2:60:87:21:87:ba:b0:4f:d6:6c:
83:ee:64:22:54:a0:b7:3f:c1:21:77:1b:dc:af:c7:
10:1f:88:d5:ba:17:db:80:e1:c7:47:e5:dc:a4:44:
c1:10:b8:48:85:6e:27:11:12:12:98:cd:74:64:e7:
cf:14:6c:8f:c8:2f:84:67:03:d0:78:73:99:61:f9:
5c:c6:48:c8:96:06:0c:96:3d:94:c0:0c:d9:4a:67:
d5:3b:14:40:2e:53:d4:f5:52:ee:fe:5c:8f:0e:31:
9f:4d:f5:84:31:a6:17:e5:55:6c:87:c8:1a:bf:7e:
60:13:c6:f3:13:64:0e:c7:9e:32:90:d3:5e:c6:f4:
11:bf:62:bd:42:af:3b:3d:6e:95:2e:64:49:f5:98:
04:7b:c5:37:32:4c:b6:0a:32:ef:6c:29:51:5c:0f:
41:d0:f3:d2:87:9b:64:ba:0b:85:42:f5:da:5e:74:
d9:c5:5e:36:0c:37:5a:79:b0:0e:8d:58:28:ed:9e:
86:2b:23:5d:ac:a7:a7:3b:31:98:ea:10:16:26:37:
d8:eb:8e:78:23:5d:6a:9b:74:95:cf:24:b6:f4:b7:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138944
sbgp-ipAddrBlock: critical
IPv4:
103.137.142.0/23
IPv6:
2405:6340::/32
Signature Algorithm: sha256WithRSAEncryption
3a:19:a8:73:29:fe:f6:11:99:ad:bc:b9:69:2a:c0:04:c1:63:
a9:0c:f8:eb:37:3f:9c:a0:3c:37:eb:a1:e6:f0:4d:a9:d3:d0:
37:e8:05:49:65:93:27:24:f2:61:c0:6d:9e:f8:3f:f7:12:d1:
85:2a:84:9f:a5:1d:9e:49:80:cc:65:d4:9e:d3:f8:58:8e:c9:
05:5c:c8:67:91:f8:73:08:1a:ba:ee:7e:51:fb:f6:e0:d8:1e:
16:f3:26:b0:69:43:74:1f:63:89:ce:fe:71:a7:bb:b9:6c:91:
52:c2:b0:b0:e3:e2:3e:ec:37:2b:9c:76:85:26:86:3b:06:92:
00:00:3d:6f:8f:c9:8a:d9:0a:46:44:4f:bb:dc:f9:63:52:85:
20:4d:dc:16:cb:60:ac:ff:b4:95:77:64:8e:52:d4:42:91:5e:
8d:2d:54:b9:cd:55:77:2f:1e:90:c4:9e:ad:32:45:78:8e:09:
cb:65:f2:5a:a8:73:fd:79:01:be:ce:66:bf:59:d0:a5:05:da:
4b:85:84:18:2b:ae:ea:7e:d9:ed:cf:9c:6a:0d:c2:db:d1:ce:
1a:a8:fc:13:d9:20:69:f5:9c:42:17:4d:29:d3:a8:30:bb:fa:
f7:0b:b0:1e:d0:5d:6f:34:2b:36:55:b2:04:2f:3d:bc:67:ed:
46:d5:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:45:57 2024 by rpki-client on console-ams.rpki-client.org