Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.cer (raw, json)
Hash identifier: GXAQsSQOLulD2xpvRJsybz22tE8UlnoFPxycjIxTx8k=
Subject key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020306
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jul 2024 22:19:57 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132018
AS: 136726
IP: 103.21.192.0/24
IP: 103.94.184.0/24
IP: 2001:df1:7f00::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131846 (0x20306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jul 29 22:19:57 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91DF3CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:3b:37:ed:02:49:1c:4b:90:d4:f8:eb:2f:
c1:36:f2:b6:8f:43:23:12:c7:dc:7e:56:10:7e:55:
ef:28:82:f4:ae:7a:89:03:e6:61:fa:24:80:6b:7d:
cb:34:56:a8:18:7c:36:75:8e:e4:4a:45:71:11:6d:
1f:07:40:f8:3b:d3:3d:84:a2:8c:e6:bc:45:cd:0a:
ad:4e:88:2f:8c:bd:fb:db:87:69:99:19:fe:2e:46:
74:f8:39:68:b5:8b:fa:27:57:5f:54:05:47:52:9d:
19:c5:21:ef:c4:8f:9b:e6:be:14:97:46:94:c9:1e:
2d:6a:96:25:cb:0f:50:9e:4a:ca:1a:c9:0e:70:84:
c1:34:10:96:48:c2:5d:c4:e4:13:72:58:88:46:84:
de:d1:e7:5e:6d:cc:c1:9b:0b:d4:c3:f5:87:e5:40:
f3:db:80:58:7c:ec:fd:02:65:78:0c:a4:2b:b9:05:
50:8f:20:46:41:9c:30:d9:9e:46:36:e5:6b:f3:ac:
89:c5:49:1e:ec:9a:f3:aa:66:c9:e7:68:82:c9:96:
68:aa:00:85:22:d6:89:c5:5a:fc:8f:10:67:ad:4d:
6c:6d:64:2f:df:48:4f:b7:bf:a1:1a:30:ef:0b:82:
21:b8:e3:1d:29:6d:9b:17:22:2d:de:04:d4:c8:fb:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132018
136726
sbgp-ipAddrBlock: critical
IPv4:
103.21.192.0/24
103.94.184.0/24
IPv6:
2001:df1:7f00::/47
Signature Algorithm: sha256WithRSAEncryption
c1:8c:51:ca:36:a9:0a:c5:bf:72:e4:a9:41:50:9b:d0:5b:7b:
ad:88:cd:63:4a:19:70:1e:ed:ae:e2:ca:7f:3a:e6:e6:10:bc:
be:c6:4a:b8:85:1d:8c:a6:45:4d:fa:29:05:6d:6b:dc:2f:38:
3d:e6:38:09:c3:e5:e7:a7:2d:ad:d3:ab:4c:49:34:7f:5c:5e:
76:2e:34:ec:f7:33:0e:1b:7e:bc:d6:42:eb:a4:ff:ef:d9:96:
01:9a:d1:95:a2:c4:be:9e:93:c5:f1:15:6d:6c:44:40:32:49:
f4:cf:89:b7:1c:f5:29:13:36:32:4f:f9:8d:30:3e:df:af:aa:
df:2c:fc:0a:74:10:ab:88:61:6e:3e:b3:c4:67:b3:56:3e:b2:
46:95:f3:cc:23:a4:70:74:f9:dc:03:6f:66:cf:77:21:42:a9:
54:ae:0a:37:33:73:00:d6:af:49:a7:af:c6:7b:89:6a:ec:75:
c8:14:47:67:2f:3d:0b:96:12:90:26:0f:e0:c7:a9:65:da:5e:
93:84:1e:88:58:a9:eb:4c:e1:8d:2c:03:39:5a:52:38:22:a2:
62:80:b1:59:cc:4d:0b:fa:2c:62:71:73:8b:52:75:36:45:28:
d1:30:44:87:2d:98:1a:b2:c1:4d:74:92:df:1b:ec:51:20:84:
47:e5:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:12 2025 by rpki-client