Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer (raw, json)
Hash identifier: 5QgX1EoD8ZBtDqaSgUyp5EkfyXSQyVEWYHTDUCXOgoY=
Subject key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C312
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Oct 2023 08:11:10 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151834
IP: 103.217.70.0/23
IP: 2401:40e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115474 (0x1c312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 08:11:10 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:9d:02:b9:64:d2:27:36:29:45:27:92:74:
2b:35:a3:29:db:53:a8:b0:ac:ed:9d:1a:3c:6d:53:
17:67:c7:d9:40:ab:ae:b2:e9:25:25:9e:ae:2f:1a:
da:2e:b1:60:8f:0c:33:f9:21:0d:14:89:3e:6b:4a:
b3:5d:b9:93:ac:a9:20:87:07:df:60:f8:d2:ae:25:
be:28:e1:10:5a:0d:6a:f2:58:1d:10:b2:aa:a0:c9:
c2:28:be:33:ec:a7:f4:81:86:47:ba:a4:19:86:fd:
ce:69:b5:b8:cf:27:63:17:85:b4:55:db:84:7a:4e:
7a:96:53:bc:34:07:89:0b:ec:a4:dd:55:9b:cf:9f:
04:e5:c8:11:1b:a7:69:58:9e:e8:f3:29:69:d4:65:
47:5e:fc:23:e0:bd:9a:a5:fb:c2:f6:3e:32:ff:04:
71:78:7c:98:d2:a8:d4:3a:f7:26:cc:01:7a:f4:ff:
91:22:91:64:c4:85:55:3a:38:39:a0:29:1c:92:de:
3a:33:a5:5b:34:90:4c:39:5b:03:c0:16:56:d3:f0:
69:af:d8:8c:3f:07:b1:0d:c6:7f:c4:11:9c:d0:46:
40:d4:7a:c3:10:fd:0e:d7:fe:75:c5:cd:52:55:9d:
d0:5b:46:b5:84:82:90:a2:47:f2:78:14:19:f9:7b:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151834
sbgp-ipAddrBlock: critical
IPv4:
103.217.70.0/23
IPv6:
2401:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b0:0f:ba:9c:4f:12:36:83:09:ba:2e:74:fd:a6:51:36:9e:
bc:a1:06:53:95:2c:5f:c2:a3:39:9c:a6:6c:0e:f7:bb:0e:78:
be:65:89:bb:fe:73:c9:55:b3:93:4e:de:00:4b:dc:97:c7:b9:
10:33:d1:1c:e9:c2:b5:87:a3:8f:03:52:b7:5a:ff:3f:1e:52:
92:8e:a8:a5:06:4c:9a:fe:71:97:72:59:9b:c7:e6:86:82:ee:
ca:d8:02:8d:fa:e5:ee:05:a9:31:71:18:de:c7:f0:bb:8b:1e:
a4:97:de:e7:12:f8:bc:ba:18:8b:42:44:63:f9:ea:78:f1:4b:
8f:ca:ec:39:6b:3d:69:de:e4:62:b8:63:63:54:fa:21:46:1f:
46:d8:44:c8:da:bd:70:18:69:47:57:08:d3:51:d3:5d:b4:0b:
0b:52:0f:07:4f:b5:5f:a0:b8:1d:18:2a:b3:a0:6c:40:4e:c8:
67:a4:e7:0d:37:9f:11:c8:2f:4a:2b:09:a5:4a:c0:b2:29:a4:
53:85:49:13:32:e4:18:48:b4:80:41:c5:34:ce:5e:33:da:4c:
87:a2:33:17:cf:f5:48:fa:18:35:bc:51:9c:6f:3b:01:e6:a5:
62:57:8f:bb:37:0a:28:0e:74:b2:a0:a4:95:9f:2d:7e:22:73:
49:c3:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:58:42 2024 by rpki-client on console-ams.rpki-client.org