Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
File: xG1ZE_bCUMau4vMnRTXOhmKVufo.cer (raw, json)
Hash identifier: +OlIHgYEi44ssn1kNO3tU+LRr1B35BDagi290HrXh78=
Subject key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021C47
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Nov 2024 14:12:19 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 137062
IP: 103.103.108.0/22
IP: 2401:f440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138311 (0x21c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 19 14:12:19 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9148B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:87:1a:6d:e4:bc:2a:21:a0:82:ea:c0:b9:
50:c3:32:ec:5a:d4:75:93:ea:5c:df:78:b7:bf:39:
da:68:10:fd:34:c7:c4:18:91:c4:bb:5a:7d:c1:2b:
c6:6b:f1:9a:66:6d:1f:42:b9:db:7e:fe:da:dc:fa:
20:46:e3:3b:bc:f6:ea:c3:1c:55:b0:a8:0e:6d:a5:
23:3e:4c:c9:b4:d6:3b:2b:43:c9:bd:0c:43:d4:bd:
ca:27:47:0c:a8:88:69:5a:cb:4d:f1:6e:fa:8c:3d:
4b:cf:25:e8:04:7e:d0:4d:ab:64:a6:c2:e7:a0:bd:
a2:00:61:3b:e1:5b:89:2d:f0:4c:a1:53:49:03:11:
e5:fd:c7:56:c7:db:90:fa:8e:45:f4:44:2a:64:5a:
39:83:c5:34:3f:83:47:8f:86:74:b7:90:f2:69:3c:
4a:8d:d9:9c:63:fd:15:cd:99:ab:1b:06:11:4f:ed:
5d:5d:01:82:d3:53:29:c2:6f:02:2d:39:fa:b6:c4:
d2:82:ee:87:de:b7:bd:04:21:fb:f6:db:0d:26:c7:
bd:bc:ad:31:0c:f2:f3:f1:e4:39:51:39:ed:bd:9e:
eb:5d:90:85:59:dd:da:57:ec:bf:28:7e:98:31:fc:
56:93:44:38:7e:c8:68:77:10:f7:e6:52:d8:a0:5d:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137062
sbgp-ipAddrBlock: critical
IPv4:
103.103.108.0/22
IPv6:
2401:f440::/32
Signature Algorithm: sha256WithRSAEncryption
64:3a:ce:44:c5:20:43:7e:25:ca:3b:ee:c2:47:18:74:ec:ce:
10:24:71:36:4a:7f:2b:e5:30:e7:d4:70:b7:e2:9a:f9:df:85:
8f:b5:e4:d6:ce:28:13:15:6a:99:b0:69:42:a0:44:c8:57:70:
cc:40:87:f3:db:6e:97:05:8d:36:0a:14:01:36:11:99:de:90:
21:e7:f8:ad:9c:2d:3f:33:c6:e0:4c:cd:0b:10:7e:6b:f2:13:
08:92:2d:77:8a:47:c9:f8:90:da:05:1e:15:27:34:7f:30:5a:
cc:51:18:48:38:5f:7e:86:52:aa:85:6f:17:b9:98:ae:29:fe:
e7:4d:76:17:4d:15:34:6f:ab:d1:e9:08:3b:df:27:d7:18:3c:
6e:d6:63:87:08:6d:98:85:af:36:88:e9:c3:41:46:22:c9:81:
de:8a:da:81:b0:a7:7a:ae:8a:67:78:07:10:df:fb:e4:9d:51:
ff:fa:e3:5c:91:58:6d:ca:e1:74:76:cf:09:b5:6c:6a:a3:05:
d7:7d:ed:20:48:d1:bf:48:c7:73:db:5f:77:07:62:37:d6:a3:
55:1e:95:a0:dd:1e:ff:f4:3c:64:f2:53:f4:5d:10:22:39:70:
9b:5a:6c:17:93:03:49:4c:d2:7b:67:b6:43:98:b3:3e:41:cd:
10:73:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:50 2025 by rpki-client