Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
File: tCmPyy2EnY1NcSomJyvLHJbb_l4.cer (raw, json)
Hash identifier: ykElLBOL5t2dLXtig0FjsQhHVkjbw0Yiqsd3icesb/w=
Subject key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021AF1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Nov 2024 18:06:04 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 24053
AS: 134405
IP: 103.123.232.0/23
IP: 203.34.36.0/24
IP: 2404:e9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137969 (0x21af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 12 18:06:04 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:6c:38:fb:56:1c:27:83:31:38:05:29:a9:
70:25:ab:44:66:01:86:44:06:0d:c3:13:33:d9:54:
8d:da:10:d3:ae:ed:89:1e:d8:42:0e:d1:54:f4:97:
cc:31:d7:80:35:34:64:67:23:4c:c8:5c:88:27:0d:
f5:8a:60:3d:d1:18:6e:ec:e0:be:9b:2b:76:42:1e:
2b:5f:e7:85:09:54:44:2d:ac:e1:c5:fc:cf:34:64:
d9:d9:33:bf:b8:41:22:8b:f3:e6:e4:fb:f9:11:ca:
ac:cf:30:12:4e:dd:b5:8a:8c:bd:9d:a2:ce:51:61:
aa:dc:24:a2:dd:4d:bf:e3:04:e2:cf:e9:9b:16:69:
c6:4b:5b:73:20:f7:49:f9:e1:e3:2d:a7:dc:43:72:
94:be:9a:59:da:bf:56:44:17:ef:f8:24:ec:55:d4:
f9:a0:a9:05:66:14:6d:f5:4f:24:e9:dd:83:f2:6d:
e9:a7:8d:76:b5:de:3d:49:22:9d:fb:87:d7:ac:af:
c0:9a:b2:bb:88:e3:69:31:98:1a:d5:4b:d8:9f:2e:
06:38:5d:40:15:34:05:72:b2:16:59:52:b5:24:ad:
5f:04:d9:56:ca:76:e0:be:f0:51:0c:4e:df:38:d5:
40:c1:0a:48:eb:23:1d:da:9c:ff:35:3b:87:28:51:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24053
134405
sbgp-ipAddrBlock: critical
IPv4:
103.123.232.0/23
203.34.36.0/24
IPv6:
2404:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:e3:eb:c8:45:fe:af:d7:27:10:43:2c:45:a1:a4:d3:48:f6:
26:29:4b:1d:17:5d:12:ea:35:15:7f:a0:c1:93:15:90:bb:c6:
db:dd:a9:75:4b:e9:e4:b1:f2:f4:73:4b:00:e1:2e:43:75:f2:
2b:de:7e:46:b0:01:c4:ab:c8:45:19:97:51:12:be:4f:e5:bb:
0a:a1:fa:cd:cd:5d:32:c6:60:11:d7:33:83:0b:8f:24:46:83:
4c:a4:49:10:1d:07:78:bc:56:4e:3d:d6:f5:94:c0:0c:d6:1c:
a1:60:51:04:9f:ff:85:10:51:eb:9f:5a:46:e6:b6:4d:fb:05:
35:75:28:dc:5d:a6:fe:d2:fb:f2:7c:33:ee:f1:24:05:f2:74:
59:0f:fc:74:95:6b:e8:26:86:29:04:64:cb:99:29:55:db:f2:
ee:92:5c:03:71:06:c9:92:88:49:8e:10:75:2f:c8:13:08:0b:
2b:c4:de:80:6d:16:f8:92:2c:95:ec:45:d7:ae:84:77:db:d2:
15:b9:a8:64:a9:6e:bb:3f:fd:ca:96:bb:0a:53:a4:2e:e5:78:
c5:1c:b1:bc:a7:ea:ef:4b:25:61:e6:75:6b:49:86:03:2a:aa:
26:0d:a1:cf:9e:e3:14:fa:84:ae:77:4b:df:f3:4b:32:48:a4:
9f:a8:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:05:34 2024 by rpki-client on console-ams.rpki-client.org