Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
File: tkKboemiWuSuEg8IEuf8LjYjLS8.cer (raw, json)
Hash identifier: NsC1kzF5xvcQthzF8NPEbiqL6qqHrcp9qin6rcfToY0=
Subject key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0216CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 19:22:51 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138149
IP: 103.121.76.0/22
IP: 2403:6ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136909 (0x216cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 19:22:51 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:66:50:a0:a7:1e:fb:31:47:6c:ef:71:85:
83:f0:f3:43:42:ee:6f:89:c6:ae:fe:f0:55:89:63:
19:fd:8f:39:65:78:87:40:50:e2:20:8e:3f:59:3a:
59:a2:df:e8:60:a9:27:68:04:26:12:27:38:c5:9b:
30:e3:de:5a:5c:dc:d4:40:21:7f:93:ca:da:8b:97:
25:7f:ee:ce:d6:24:d8:8e:da:34:01:07:b1:ee:0f:
8c:7a:b7:a5:e9:07:6f:fd:d8:80:39:b2:66:7e:4c:
20:74:a6:cf:ab:6b:2a:19:ed:ff:fa:be:a6:02:f7:
c4:a5:88:23:b3:17:a9:13:f2:91:51:e0:a2:ff:0f:
a0:8b:f5:01:a9:ef:7a:5b:db:91:51:80:cd:36:e9:
f7:14:36:f9:f3:70:e2:f7:16:0f:73:fc:e4:45:d7:
c1:b1:59:62:4d:5f:5b:f4:da:01:5c:aa:40:b2:59:
a8:12:76:f5:67:45:6c:68:19:4c:f6:83:1d:9e:1c:
10:f6:33:fd:91:f5:a8:94:2e:bc:31:39:71:63:c0:
95:51:fd:55:62:a6:74:ac:d4:7c:a6:7f:45:c2:98:
3b:f4:16:6b:5a:4f:8b:12:0f:58:9b:5c:fe:18:c9:
7a:2f:b2:d9:aa:74:15:c3:2b:08:40:6f:a8:0a:a7:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138149
sbgp-ipAddrBlock: critical
IPv4:
103.121.76.0/22
IPv6:
2403:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
73:55:cf:55:48:71:00:95:22:b3:14:ac:8a:b7:2f:9b:52:a5:
c0:68:1e:6b:73:49:23:61:45:45:3b:be:20:64:37:43:f2:64:
80:55:22:4b:72:c1:ec:44:1e:55:eb:3e:88:87:58:3b:0c:41:
ed:ca:3d:24:69:07:c5:f2:a9:23:e2:29:15:cf:2b:2f:81:7e:
1a:8b:97:5c:51:34:14:0b:1c:87:a4:d3:0c:17:29:a1:7a:4f:
01:05:92:38:b1:bc:3a:18:77:e4:e9:df:9a:75:01:9a:0e:07:
9c:39:aa:7d:2a:54:b1:dd:06:49:19:36:16:5f:7a:72:d5:ac:
88:e4:e2:f2:6a:5f:c9:35:9a:50:08:4a:03:63:aa:59:a9:fc:
70:8b:47:95:49:5e:fd:42:be:f1:0c:b2:c8:ed:33:9d:02:61:
73:17:f2:16:91:39:50:00:96:fe:2f:f8:d6:01:5e:04:17:0e:
e3:b9:ff:72:f4:44:26:53:ae:01:f8:37:cd:09:84:6f:a9:04:
e2:1c:37:0c:3f:55:b8:75:1f:40:e1:f8:b1:f0:32:d2:f4:95:
02:fc:b9:cd:a1:5a:9a:80:19:56:6e:c8:11:e8:a8:37:5d:bc:
24:f9:07:a6:41:45:bc:42:1f:09:9f:1c:11:d8:50:87:42:cc:
9a:2d:07:37
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAhbNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAyODE5MjI1MVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYw
ODEyRTdGQzJFMzYyMzJEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClHWZQoKce+zFHbO9xhYPw80NC7m+Jxq7+8FWJYxn9jzlleIdAUOIgjj9ZOlmi
3+hgqSdoBCYSJzjFmzDj3lpc3NRAIX+TytqLlyV/7s7WJNiO2jQBB7HuD4x6t6Xp
B2/92IA5smZ+TCB0ps+rayoZ7f/6vqYC98SliCOzF6kT8pFR4KL/D6CL9QGp73pb
25FRgM026fcUNvnzcOL3Fg9z/ORF18GxWWJNX1v02gFcqkCyWagSdvVnRWxoGUz2
gx2eHBD2M/2R9aiULrwxOXFjwJVR/VVipnSs1Hymf0XCmDv0FmtaT4sSD1ibXP4Y
yXovstmqdBXDKwhAb6gKp4evAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUtkKboemi
WuSuEg8IEuf8LjYjLS8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk0MTU2LzM2NDc5Mzg0NzM2MDExRUFCNjM0OTU0NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2Vt
aVd1U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhulMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3lMMA0EAgAC
MAcDBQAkA2rAMA0GCSqGSIb3DQEBCwUAA4IBAQBzVc9VSHEAlSKzFKyKty+bUqXA
aB5rc0kjYUVFO74gZDdD8mSAVSJLcsHsRB5V6z6Ih1g7DEHtyj0kaQfF8qkj4ikV
zysvgX4ai5dcUTQUCxyHpNMMFymhek8BBZI4sbw6GHfk6d+adQGaDgecOap9KlSx
3QZJGTYWX3py1ayI5OLyal/JNZpQCEoDY6pZqfxwi0eVSV79Qr7xDLLI7TOdAmFz
F/IWkTlQAJb+L/jWAV4EFw7juf9y9EQmU64B+DfNCYRvqQTiHDcMP1W4dR9A4fix
8DLS9JUC/LnNoVqagBlWbsgR6Kg3Xbwk+QemQUW8Qh8JnxwR2FCHQsyaLQc3
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:53 2024 by rpki-client on console-fra.rpki-client.org