Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer (raw, json)
Hash identifier: IkDXexySwx/RKXc9T9gYXss630HqZD5rDtLRIMDcKGs=
Subject key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BECC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Sep 2023 05:37:15 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 137427
IP: 103.151.172.0/23
IP: 2001:df3:cd80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114380 (0x1becc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 21 05:37:15 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:f7:f3:52:d8:44:60:78:07:6f:0e:f8:56:
69:7a:09:74:89:28:4b:d8:ce:32:aa:02:3d:29:f5:
1c:bb:eb:ff:12:02:fa:12:16:cd:d5:7b:8f:28:dd:
04:57:f6:cd:af:ec:d1:56:de:45:b4:91:b5:b9:4b:
c9:fa:9a:43:ce:21:b3:05:a5:41:fd:ab:2f:cf:50:
d8:6c:f8:b2:c9:13:c0:3d:28:c5:b2:45:f1:a4:5c:
1f:af:b7:57:62:4e:45:f2:f2:14:2e:b0:c0:ff:21:
6a:c9:71:72:b3:fe:2f:15:86:38:07:98:ed:80:79:
07:1b:5d:f1:4f:cc:9b:b8:38:ed:72:f7:3a:02:a8:
12:c7:96:b5:28:a0:ea:00:46:31:71:34:ec:80:d9:
f4:5b:ba:83:16:74:ba:5a:fa:92:36:9a:43:27:2b:
e8:e7:20:28:72:10:69:56:c8:e3:41:99:79:d8:f2:
21:c5:84:8f:67:05:e0:5b:4a:1a:06:d2:3d:c5:4d:
9f:8b:15:0d:a4:bb:e4:3f:25:32:b0:1d:42:bf:00:
10:6d:4b:4f:1f:0f:59:67:36:1c:99:f1:9c:ee:a2:
70:ca:fd:f2:5c:20:a9:68:0d:db:44:62:10:89:20:
56:fa:2a:28:1a:90:eb:09:54:0f:9f:d1:c0:5d:e1:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137427
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
IPv6:
2001:df3:cd80::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c6:03:29:94:11:59:09:59:df:ce:23:d0:a8:3a:aa:b9:33:
d0:4f:23:c9:47:61:f6:78:2d:f7:88:4c:32:f5:54:19:00:a2:
46:4b:b3:1a:c5:bc:7f:54:8c:04:bc:19:f0:48:f5:2f:07:41:
90:3e:52:47:67:60:f3:55:cf:26:bd:25:ed:f2:19:34:ff:0f:
43:7d:2e:ba:37:0f:7a:df:5f:0c:60:0f:ed:b4:92:c1:08:21:
2f:11:e8:81:e2:98:e2:9f:5f:c2:d3:de:d5:57:bc:e5:0b:4e:
d4:ae:12:96:2d:d2:a2:ec:73:ef:f9:99:01:6e:06:d1:4c:0e:
3a:21:09:10:aa:9d:0d:e4:a8:36:82:11:3a:9f:9d:2b:b9:c7:
2e:91:69:73:9d:cd:d4:f2:b5:70:7a:b8:14:2f:25:b9:37:6e:
13:79:fe:2f:05:b2:7c:23:e7:8b:70:e2:20:8b:40:f6:ce:2c:
32:8f:8a:96:4e:44:4b:2e:16:c4:f1:4a:9d:cd:91:2d:d8:7f:
b4:62:0f:37:57:17:5b:ff:0d:20:cc:4e:be:51:4b:31:81:e1:
37:c8:99:d1:bb:89:d1:ac:cf:9b:2b:11:ee:df:9f:80:ca:dc:
4f:94:89:95:6f:74:e4:15:09:e9:d5:c5:51:15:6e:fe:57:a1:
f5:53:64:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:07:32 2024 by rpki-client on console-fra.rpki-client.org