Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer
File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer (raw, json)
Hash identifier: 7vGjExB98ig6C/E8X1hINQXWg81Dv/7nLhv/XmaTkGQ=
Subject key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD5E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Nov 2023 17:32:03 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 133546
IP: 103.234.92.0/24
IP: 203.1.3.0/24
IP: 2001:df7:1200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118110 (0x1cd5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 28 17:32:03 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:33:36:59:41:f5:a2:0d:9d:34:0d:42:88:
ab:1b:91:eb:8e:79:39:1d:a6:71:d9:a7:b5:e4:4f:
55:b4:3d:b6:5e:b4:1d:19:83:f8:f8:27:14:63:64:
cb:ab:85:63:4f:24:ab:0d:3f:2e:fb:4e:6d:5d:b3:
cd:88:bf:88:f6:4d:a5:47:c6:ba:6b:65:cc:df:d3:
41:df:70:40:fa:83:6c:d7:06:64:3b:0b:05:c9:99:
ec:46:ec:02:a0:27:81:f1:fd:ae:75:f2:3e:e5:e1:
a2:32:61:47:2c:4b:ee:41:5a:ef:f8:bc:03:bd:6c:
24:58:0d:68:3e:74:52:db:82:f1:76:da:19:4f:0c:
6f:15:7b:a1:f9:ad:03:a0:56:cf:2f:8c:1e:c0:29:
9f:72:db:fe:ae:ec:06:c3:16:c5:34:d2:42:ae:4c:
a4:23:c3:5e:d6:38:64:bc:30:52:b0:6b:35:8d:09:
90:66:4c:f6:b5:a4:bc:45:31:ea:b5:ba:10:0b:7f:
a0:d1:dd:fa:ed:bc:0d:4f:b4:dd:3f:db:39:c7:e6:
71:aa:fc:63:80:85:a8:d4:7d:37:7e:a3:bd:fb:39:
2f:b7:74:bc:02:da:5c:01:e0:a4:9d:46:23:81:1a:
6f:a2:8a:b1:07:a0:41:86:8f:14:27:ca:30:52:d5:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133546
sbgp-ipAddrBlock: critical
IPv4:
103.234.92.0/24
203.1.3.0/24
IPv6:
2001:df7:1200::/48
Signature Algorithm: sha256WithRSAEncryption
25:42:9b:fc:94:a4:7c:48:27:b2:1d:c0:2f:36:e1:e1:b9:12:
91:80:a4:c8:8f:78:54:ac:15:0f:b2:78:7e:68:41:81:4d:bd:
28:b8:19:37:71:11:aa:5b:80:5d:8b:e6:50:40:2a:4e:9d:33:
cd:95:99:76:a7:c1:48:e1:5c:f8:20:bd:c0:a8:7c:4e:10:9a:
ec:2e:61:7c:1b:6c:d5:17:ad:af:64:2b:92:aa:ea:0f:6e:35:
1f:9a:6b:96:69:76:a7:86:ba:cf:b4:c2:08:b4:89:8b:aa:e2:
8a:28:e7:68:e8:cc:16:d6:ed:c9:c7:32:83:21:49:20:a4:36:
f4:7d:be:c2:ac:3b:4e:6a:21:ab:e3:fa:7e:14:9e:3a:c3:6a:
96:54:cd:ea:01:f9:1a:89:2b:74:39:33:af:67:b7:9e:45:a8:
e8:11:32:35:14:79:dd:c1:15:d9:6c:b2:ae:b4:fb:da:bc:11:
cb:74:dd:ee:f4:cd:2f:0a:a8:2c:ed:fe:b7:5e:16:42:aa:4e:
ea:f0:c4:9e:e6:37:9d:40:f1:88:59:3a:67:00:e4:a4:8c:fe:
cb:12:73:e2:1d:42:1e:93:ba:7a:ce:e5:b8:4a:cd:c7:61:ce:
b5:02:dc:a9:38:b8:b4:a6:67:40:51:9b:8e:73:29:1e:53:41:
67:12:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:06 2024 by rpki-client on console-fra.rpki-client.org