Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
File: uu94943Hy_m3MScKqxBp9eNDPLs.cer (raw, json)
Hash identifier: 308MIDliALZkiui8Y7l9AAybd9JBx2BWFB5qdLjEEL0=
Subject key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021542
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Oct 2024 17:40:50 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 133545
IP: 103.75.240.0/22
IP: 116.206.52.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136514 (0x21542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 22 17:40:50 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:57:2f:99:b2:ec:5b:20:54:38:b4:1e:64:
1a:a0:d3:3e:ba:0a:4b:33:1f:c6:a5:00:15:b9:ac:
66:85:30:4d:fa:4a:da:fb:78:7b:15:05:86:07:7b:
a7:78:2d:17:6e:1a:be:04:74:3c:b2:0a:98:73:63:
a8:03:35:58:bf:39:92:db:d5:55:e3:aa:61:c2:02:
da:c2:d5:ed:5d:f9:97:28:8e:d3:b1:c8:44:7b:67:
23:1e:df:cb:e6:9a:2f:64:05:e8:02:25:d0:a8:63:
51:d9:4f:f2:1d:96:5e:3b:71:a4:94:87:46:fc:51:
8d:6b:31:ad:ab:c6:33:d1:10:5f:6d:90:19:a4:7b:
ae:64:69:df:7f:29:97:3d:9b:ed:80:24:44:bb:1b:
bc:90:fe:49:46:6c:7a:35:93:57:9c:a0:e1:93:83:
8a:bb:f5:80:5e:fd:1a:d3:0a:2c:b9:b5:24:d1:80:
36:e4:bd:a6:c6:00:51:bb:dc:8e:c5:54:91:d0:05:
fd:35:21:43:72:93:9c:1f:70:53:70:66:f4:de:c7:
c6:05:06:df:3e:06:ee:a5:d2:4d:0a:b8:f3:91:21:
fb:d1:dc:63:41:9d:af:88:c4:a7:bb:6a:40:d3:51:
44:fa:b7:95:c6:dc:46:dd:b0:e4:d0:88:1a:7d:08:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133545
sbgp-ipAddrBlock: critical
IPv4:
103.75.240.0/22
116.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:f1:f9:fc:ca:cc:2a:fe:3d:d5:89:71:60:4b:a8:36:ea:6e:
c3:39:50:7d:df:10:0e:45:cc:03:2d:84:4d:ab:a2:9e:e1:b2:
37:73:78:06:44:56:2e:a5:0f:2c:0d:51:7a:d9:e6:66:54:4d:
1b:49:06:1e:06:f2:95:f6:56:df:26:9a:44:34:e9:7f:4c:ab:
17:d9:64:79:94:aa:9f:e7:7b:99:80:ba:49:6e:1a:dc:e8:58:
21:69:a5:ff:71:76:d9:51:f0:df:c2:2d:82:a4:f2:ff:e8:d2:
6f:76:da:a6:8d:d4:a8:e6:d8:93:a3:42:29:08:34:9d:6c:de:
db:48:8c:23:bd:84:d0:7e:73:7d:a2:3d:c5:1a:c8:dd:de:57:
d9:87:6e:aa:e9:d6:f4:b3:34:a8:56:0e:a3:98:9a:27:39:6a:
84:f9:d3:2e:44:ef:16:58:fc:4e:21:fe:b4:c6:21:64:c6:34:
f2:4b:cc:70:ae:fd:56:37:7b:8d:42:c2:7c:c8:96:d5:c5:7e:
6e:3b:76:69:88:e0:b4:ba:b7:09:af:65:e7:ab:36:22:39:a4:
64:3b:ff:ef:f2:8b:17:25:17:77:1f:27:c9:1b:7a:b1:b4:77:
fe:38:7e:5f:a2:8e:6c:aa:7e:a8:32:ea:7e:51:53:5d:fb:44:
fe:e8:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:51:10 2024 by rpki-client on console-ams.rpki-client.org