Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
File: tLSrnzywRDD9ZNTuKt0IReRNV_8.cer (raw, json)
Hash identifier: +eAZyOGJq/OAE0/0g4i62wzV5GtYKEU/71X3rz4X8LM=
Subject key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E9E5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Apr 2024 17:51:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 139610
IP: 103.136.68.0/22
IP: 2404:8d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 23:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125413 (0x1e9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 4 17:51:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:61:89:fb:b6:07:b8:aa:88:d6:76:b3:c7:
9c:cb:2b:62:6a:ae:83:d7:ef:79:0f:05:a9:7b:6f:
62:9e:32:c0:9c:6c:e5:9e:f7:24:32:a8:67:80:49:
f9:01:eb:b7:a8:c7:dc:1b:dd:a6:a0:00:43:d2:c2:
f5:28:45:3a:8f:fe:63:20:f0:7c:3b:c2:ce:4c:d7:
71:5b:ea:0a:13:29:33:25:2c:b7:c8:9d:d2:60:ae:
36:64:e8:e2:3c:b4:7b:5d:ce:71:94:d4:27:de:c8:
60:03:2b:a5:73:dd:63:d4:df:b4:9c:6d:10:c0:b6:
a3:b3:c8:78:dc:f3:72:16:fc:4b:ff:b6:d4:66:00:
5b:0e:ed:b8:94:2c:31:30:c5:15:92:53:dc:15:fe:
a8:af:46:30:65:2c:c1:81:a7:14:7d:8c:9f:0d:21:
15:1d:1f:27:d1:83:7b:ea:72:57:c0:bb:6c:18:4a:
24:d0:8e:a5:c3:f3:f7:5a:fb:93:03:05:c1:3b:7b:
29:58:ea:ee:b0:28:4c:68:4f:dd:a2:58:d6:7d:fd:
15:30:e3:d2:c5:c5:dc:df:0f:3b:50:05:58:0a:ea:
d4:5b:f7:0c:db:72:e9:f1:bd:01:8e:d3:d8:bc:91:
37:e2:62:2b:27:d8:9f:ff:05:1f:67:db:fa:37:7f:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139610
sbgp-ipAddrBlock: critical
IPv4:
103.136.68.0/22
IPv6:
2404:8d40::/32
Signature Algorithm: sha256WithRSAEncryption
34:54:ac:8a:66:39:1d:ed:c4:c9:71:bf:2b:2d:a9:72:eb:fe:
2f:a1:23:f1:c3:f1:69:5e:ee:16:38:34:29:b8:0d:16:c6:d9:
85:e7:46:22:86:fb:41:34:3f:db:c1:95:08:f6:0b:8b:70:95:
a2:2b:e8:07:4d:02:74:8a:2b:01:97:ec:a4:3e:0b:b9:41:9c:
2a:ea:7f:78:dd:4d:b0:3d:a8:8c:9f:72:ce:64:c6:73:f9:e5:
f0:4b:83:5d:f9:e8:43:ac:24:b0:d1:18:c7:f6:a5:fd:08:5f:
80:5e:eb:29:d9:38:ee:7f:06:1c:cf:06:f2:88:c8:d9:19:ac:
42:23:44:a6:cb:bc:44:df:d3:18:6c:b9:e5:3c:47:ff:7b:41:
78:a4:b8:67:fd:0e:e4:60:90:95:82:46:52:25:bd:9b:88:2f:
d8:87:a5:62:47:86:c2:bb:03:e0:f8:a2:74:34:39:d3:16:dc:
4b:31:de:b0:c9:2a:d0:6a:ea:29:32:15:19:78:4d:73:9e:2c:
f7:ed:e7:3e:93:a1:44:f5:b1:7f:a5:b2:0f:16:cd:a2:71:ec:
08:c2:ca:0f:6c:81:71:8f:de:6f:a3:8d:66:84:96:65:ff:7d:
a8:85:75:c5:44:55:e6:3b:51:0d:46:14:21:e3:3a:0b:23:c0:
4f:6a:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:33:02 2024 by rpki-client on console-fra.rpki-client.org