Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer (raw, json)
Hash identifier: lle84uK914HdcpKbFnXHqsCoZ+BD6c36oNziguls0vs=
Subject key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B15E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Jul 2023 16:01:10 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 131448
IP: 103.69.136.0/22
IP: 116.66.180.0/22
IP: 2405:ef80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Apr 2024 04:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110942 (0x1b15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 20 16:01:10 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:23:bf:a6:99:78:00:2c:9a:63:80:a9:04:
9b:dd:95:6c:80:25:9a:cc:89:da:83:f0:d5:45:d2:
36:c2:96:a4:50:d3:05:6f:17:3d:85:ee:91:a5:48:
80:91:2b:99:6c:52:97:2e:5b:62:85:89:29:0f:df:
66:fc:15:7f:26:b0:07:b6:ad:d7:58:e3:96:5f:c4:
64:89:9d:c1:12:e1:b7:11:9c:64:7f:63:b9:dc:b2:
f9:f0:3c:80:ea:b3:3d:b9:9f:07:24:7f:e8:53:dc:
51:0c:07:68:23:2b:b1:4e:2b:53:76:2c:b4:e3:03:
a6:2a:8d:35:11:ef:08:a4:50:e1:e3:eb:0d:8a:5f:
73:83:5c:cf:ec:de:45:f9:a4:b1:8d:8f:79:87:a2:
31:12:ed:f3:7e:8e:fc:8c:42:26:1a:24:67:73:0a:
7e:63:c6:3d:fb:d8:2f:40:5a:1e:1d:cd:95:76:8a:
7f:6a:ee:58:be:84:33:9a:ad:64:ed:e4:a4:ec:8a:
c1:84:e7:d5:fa:53:39:a9:01:69:ce:52:8b:ac:9b:
3f:60:75:e4:03:01:59:75:f5:ce:84:22:40:95:1b:
26:99:b1:ef:8b:a8:a8:fa:26:0a:b7:13:cf:cd:b0:
e3:6c:f4:7a:4e:c2:9f:7e:a2:4d:ff:97:e1:1a:4d:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131448
sbgp-ipAddrBlock: critical
IPv4:
103.69.136.0/22
116.66.180.0/22
IPv6:
2405:ef80::/32
Signature Algorithm: sha256WithRSAEncryption
5d:5e:d3:19:71:57:5a:fe:c3:c1:37:3f:01:23:eb:f4:c5:b1:
c7:cf:86:67:41:cb:b2:84:20:55:80:67:73:40:4a:f0:6a:f2:
54:58:5b:f3:a6:f5:9b:2a:00:18:01:45:8c:5d:c3:f5:5e:c7:
91:8c:e8:28:28:d7:ce:03:5f:2e:b1:09:19:15:d6:ec:02:5e:
5b:2e:6a:88:f4:c6:c5:85:d2:1d:65:85:4b:ee:e0:86:a1:d6:
0e:3d:fb:c7:3c:ca:22:06:98:f0:3f:ae:af:1e:6b:67:d4:d0:
c0:7e:79:9a:ed:13:a6:41:80:af:6d:b5:b5:c1:49:f4:07:c3:
20:e3:cb:04:84:8b:91:09:cb:2d:3b:d2:f0:cb:5d:40:f4:58:
77:a6:f6:57:ad:d1:f3:e5:56:56:95:dc:c9:ab:28:2f:6f:6b:
7d:7f:90:98:5e:ed:9d:2c:83:bc:f1:74:e4:12:22:79:f7:cf:
25:4c:48:3d:9a:99:7b:04:d5:9f:b2:e0:bb:9c:20:18:c9:98:
08:0b:4d:99:f1:9f:6c:7c:20:b0:f3:e1:b4:bd:7b:f1:92:fc:
0a:04:5d:60:4f:30:36:71:71:4f:e4:1b:2b:63:cc:23:1b:db:
2b:be:0b:ae:6e:da:77:9c:6f:a3:6b:e7:be:3c:f5:b3:d8:07:
0f:0b:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:32 2024 by rpki-client on console-ams.rpki-client.org