Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
File: uu94943Hy_m3MScKqxBp9eNDPLs.cer (raw, json)
Hash identifier: 7/0PJMRDBvnubnQplQlc1H+P5f4Ar/ZkMa5h3Mhrl/0=
Subject key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020741
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 Aug 2024 07:28:03 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 133545
IP: 103.75.240.0/22
IP: 116.206.52.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 20:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132929 (0x20741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 16 07:28:03 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:57:2f:99:b2:ec:5b:20:54:38:b4:1e:64:
1a:a0:d3:3e:ba:0a:4b:33:1f:c6:a5:00:15:b9:ac:
66:85:30:4d:fa:4a:da:fb:78:7b:15:05:86:07:7b:
a7:78:2d:17:6e:1a:be:04:74:3c:b2:0a:98:73:63:
a8:03:35:58:bf:39:92:db:d5:55:e3:aa:61:c2:02:
da:c2:d5:ed:5d:f9:97:28:8e:d3:b1:c8:44:7b:67:
23:1e:df:cb:e6:9a:2f:64:05:e8:02:25:d0:a8:63:
51:d9:4f:f2:1d:96:5e:3b:71:a4:94:87:46:fc:51:
8d:6b:31:ad:ab:c6:33:d1:10:5f:6d:90:19:a4:7b:
ae:64:69:df:7f:29:97:3d:9b:ed:80:24:44:bb:1b:
bc:90:fe:49:46:6c:7a:35:93:57:9c:a0:e1:93:83:
8a:bb:f5:80:5e:fd:1a:d3:0a:2c:b9:b5:24:d1:80:
36:e4:bd:a6:c6:00:51:bb:dc:8e:c5:54:91:d0:05:
fd:35:21:43:72:93:9c:1f:70:53:70:66:f4:de:c7:
c6:05:06:df:3e:06:ee:a5:d2:4d:0a:b8:f3:91:21:
fb:d1:dc:63:41:9d:af:88:c4:a7:bb:6a:40:d3:51:
44:fa:b7:95:c6:dc:46:dd:b0:e4:d0:88:1a:7d:08:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133545
sbgp-ipAddrBlock: critical
IPv4:
103.75.240.0/22
116.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
70:c7:d0:2d:f3:61:fd:fc:1d:ab:35:2a:09:e3:66:9f:bd:a0:
68:ac:2f:5f:1e:70:e7:e3:54:ce:04:21:e3:91:78:b0:4a:35:
15:4e:40:65:bb:29:7f:7e:be:e5:54:16:33:be:18:b3:53:2e:
27:bb:e1:c1:d7:9b:16:f9:41:0c:8c:ec:d7:22:3e:68:03:4f:
38:82:9e:3c:08:88:8f:73:d2:4d:1f:cb:b5:1a:3b:4d:9e:3b:
68:ab:f1:14:c8:b5:77:0f:9f:29:44:73:6e:af:47:34:21:d2:
f9:1d:aa:b0:e0:50:a5:33:1b:43:07:da:c1:28:b7:84:96:d5:
38:9b:c6:27:ad:47:9a:80:9a:de:0c:d3:56:b1:1e:75:0a:a7:
d6:5b:8b:17:37:e9:96:64:49:cb:8e:eb:a4:44:87:5b:c7:23:
26:97:7f:ec:5d:56:34:6f:22:3f:2f:c4:b9:86:ec:57:53:73:
bc:c7:dd:e7:33:0c:1a:a3:80:e8:fc:75:8a:9b:99:47:a3:86:
49:d7:10:e2:7f:e3:35:e1:47:c9:ef:84:85:5c:8f:7b:21:25:
b9:60:8c:8c:89:cb:ce:d2:5f:6c:16:c9:06:c1:6a:57:bc:2c:
73:9f:f1:d1:4f:9b:ae:01:4e:2c:ee:af:31:3b:60:f6:f0:00:
f8:0b:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:56:30 2024 by rpki-client on console-ams.rpki-client.org