Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
File: tCmPyy2EnY1NcSomJyvLHJbb_l4.cer (raw, json)
Hash identifier: b65Z0hxAQQZ8ADodPQX/0Ud3PD6wpCQpxRKXFpFdwTY=
Subject key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C9E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Nov 2023 02:59:03 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 24053
AS: 134405
IP: 103.123.232.0/23
IP: 203.34.36.0/24
IP: 2404:e9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117222 (0x1c9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 02:59:03 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:6c:38:fb:56:1c:27:83:31:38:05:29:a9:
70:25:ab:44:66:01:86:44:06:0d:c3:13:33:d9:54:
8d:da:10:d3:ae:ed:89:1e:d8:42:0e:d1:54:f4:97:
cc:31:d7:80:35:34:64:67:23:4c:c8:5c:88:27:0d:
f5:8a:60:3d:d1:18:6e:ec:e0:be:9b:2b:76:42:1e:
2b:5f:e7:85:09:54:44:2d:ac:e1:c5:fc:cf:34:64:
d9:d9:33:bf:b8:41:22:8b:f3:e6:e4:fb:f9:11:ca:
ac:cf:30:12:4e:dd:b5:8a:8c:bd:9d:a2:ce:51:61:
aa:dc:24:a2:dd:4d:bf:e3:04:e2:cf:e9:9b:16:69:
c6:4b:5b:73:20:f7:49:f9:e1:e3:2d:a7:dc:43:72:
94:be:9a:59:da:bf:56:44:17:ef:f8:24:ec:55:d4:
f9:a0:a9:05:66:14:6d:f5:4f:24:e9:dd:83:f2:6d:
e9:a7:8d:76:b5:de:3d:49:22:9d:fb:87:d7:ac:af:
c0:9a:b2:bb:88:e3:69:31:98:1a:d5:4b:d8:9f:2e:
06:38:5d:40:15:34:05:72:b2:16:59:52:b5:24:ad:
5f:04:d9:56:ca:76:e0:be:f0:51:0c:4e:df:38:d5:
40:c1:0a:48:eb:23:1d:da:9c:ff:35:3b:87:28:51:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24053
134405
sbgp-ipAddrBlock: critical
IPv4:
103.123.232.0/23
203.34.36.0/24
IPv6:
2404:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ae:a9:f7:5f:41:83:c5:98:64:40:cf:6d:34:36:a7:00:c0:
20:72:32:b4:bc:6d:84:79:a1:3c:a1:5c:c9:ce:69:b1:57:7d:
f4:44:56:52:20:c9:be:02:94:07:55:2c:79:ab:36:e3:f6:18:
bb:27:3b:26:de:ae:80:7f:c1:51:3a:03:a4:b9:6d:e5:ca:47:
a6:6e:ba:10:ec:ba:62:da:23:ac:88:c5:fd:8d:c2:df:55:d5:
25:63:11:2b:94:21:e8:80:5b:13:3d:b8:ba:fc:46:54:21:02:
06:17:2d:7b:58:04:27:a1:8e:d4:e2:1f:fc:62:82:94:1b:88:
9f:47:a1:94:bd:a4:93:b5:4d:5f:10:68:e3:03:a0:69:ac:9a:
bd:07:fa:a8:6f:fc:66:ea:dd:6c:19:f8:f0:bc:aa:81:8b:96:
4c:2f:4c:39:85:b7:3e:46:21:32:ca:5a:9e:6d:65:fb:c4:71:
88:c1:2b:9d:60:d0:13:be:26:3b:db:da:10:d1:34:f9:3a:97:
67:56:e2:96:d5:2c:34:91:61:1a:93:0e:a2:ed:c2:bc:95:1f:
f4:17:d3:93:9f:c2:a1:43:c4:00:b2:0f:e7:9c:51:7d:1d:70:
e2:45:25:9e:4b:96:1e:9e:fe:0d:88:b1:55:94:f4:aa:00:c0:
fa:4d:3c:50
-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgIDAcnmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwOTAyNTkwM1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEy
NjI3MkJDQjFDOTZEQkZFNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiAmw4+1YcJ4MxOAUpqXAlq0RmAYZEBg3DEzPZVI3aENOu7Yke2EIO0VT0l8wx
14A1NGRnI0zIXIgnDfWKYD3RGG7s4L6bK3ZCHitf54UJVEQtrOHF/M80ZNnZM7+4
QSKL8+bk+/kRyqzPMBJO3bWKjL2dos5RYarcJKLdTb/jBOLP6ZsWacZLW3Mg90n5
4eMtp9xDcpS+mlnav1ZEF+/4JOxV1PmgqQVmFG31TyTp3YPybemnjXa13j1JIp37
h9esr8CasruI42kxmBrVS9ifLgY4XUAVNAVyshZZUrUkrV8E2VbKduC+8FEMTt84
1UDBCkjrIx3anP81O4coUWzRAgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUtCmPyy2E
nY1NcSomJyvLHJbb/l4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVDOTNFLzVBRTc4NTJFOUYyNzExRUNCRjYwRDI3RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXky
RW5ZMU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICXfUCAwINBTA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAWd76AME
AMsiJDANBAIAAjAHAwUAJATpwDANBgkqhkiG9w0BAQsFAAOCAQEAPK6p919Bg8WY
ZEDPbTQ2pwDAIHIytLxthHmhPKFcyc5psVd99ERWUiDJvgKUB1Useas24/YYuyc7
Jt6ugH/BUToDpLlt5cpHpm66EOy6YtojrIjF/Y3C31XVJWMRK5Qh6IBbEz24uvxG
VCECBhcte1gEJ6GO1OIf/GKClBuIn0ehlL2kk7VNXxBo4wOgaayavQf6qG/8Zurd
bBn48LyqgYuWTC9MOYW3PkYhMspanm1l+8RxiMErnWDQE74mO9vaENE0+TqXZ1bi
ltUsNJFhGpMOou3CvJUf9BfTk5/CoUPEALIP55xRfR1w4kUlnkuWHp7+DYixVZT0
qgDA+k08UA==
-----END CERTIFICATE-----
Generated at Wed Apr 24 23:35:24 2024 by rpki-client on console-ams.rpki-client.org