Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer (raw, json)
Hash identifier: 80mtmXS4P91Suo81W9HRaOWoPGQinS2m/OQyqd8dF58=
Subject key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F7BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Jun 2024 19:33:30 +0000
Certificate not after: Sat 01 Jul 2028 00:00:00 +0000
Subordinate resources: AS: 150809
IP: 103.214.40.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128958 (0x1f7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 19:33:30 2024 GMT
Not After : Jul 1 00:00:00 2028 GMT
Subject: CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:44:cb:d7:da:1a:dc:80:dd:07:92:53:2b:
45:b2:1b:f9:22:09:d1:4c:8d:4e:ba:5f:74:b1:9c:
aa:df:51:a6:62:a3:27:e1:8e:14:27:2c:b4:3e:af:
15:b8:c4:82:ba:02:27:96:e4:67:c4:d2:48:c3:98:
86:8a:60:04:26:61:72:b6:e6:5c:02:85:fa:ab:ed:
bf:f1:8d:41:8a:9d:1e:5c:ef:4d:a8:f3:eb:cc:ed:
14:57:33:18:3d:58:98:1b:2e:73:20:1f:8d:8a:42:
71:39:5c:9d:a3:99:ca:55:6e:d2:88:07:c7:1b:d1:
79:48:5f:e1:fe:88:da:e4:a7:98:7f:58:a8:de:d7:
52:b4:7c:9b:5f:55:ae:a5:2e:b2:a2:29:6c:ef:0c:
e8:cf:d9:53:f7:ae:55:e6:f2:a9:10:68:e6:e4:8c:
75:14:06:10:0b:d3:c6:53:32:e7:41:59:3e:27:e4:
9f:fc:75:41:11:24:e2:1a:2f:8c:c2:21:cf:e2:01:
7a:12:41:b9:79:be:ad:76:13:58:44:c1:1e:54:33:
36:16:f4:8e:2f:94:3d:3d:f9:93:c0:85:16:9f:5a:
32:f5:b7:81:a7:da:73:3b:e4:a8:0a:5d:93:2e:d4:
7f:a2:45:0d:87:a6:b2:34:2f:3c:46:dd:20:ab:33:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150809
sbgp-ipAddrBlock: critical
IPv4:
103.214.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:99:d8:c7:d6:ad:04:ef:0a:d2:84:31:d2:4f:b7:0d:32:d2:
49:db:0b:0c:59:aa:ad:59:e5:74:f8:81:51:1f:05:b9:23:8a:
09:4c:63:10:db:59:fa:3f:94:39:a1:a7:6e:11:85:fc:a3:e8:
97:b3:0b:db:98:64:20:52:f6:e0:84:0e:72:af:4c:09:2e:16:
57:cc:db:3e:36:33:5a:1a:e2:0f:01:e7:2c:d4:74:1f:96:fa:
af:9f:e5:c2:67:44:82:44:56:38:47:6b:fe:01:d5:e6:18:dc:
6b:ec:77:53:c5:26:58:6a:26:f6:52:a7:33:d4:87:02:25:24:
71:8e:46:df:c9:60:26:af:88:a3:3d:af:40:90:51:3d:44:1d:
a1:f4:b2:24:87:12:c2:ee:45:71:27:a6:3c:99:40:14:d6:06:
59:f3:36:d8:94:13:ee:31:8a:02:85:dc:f8:42:e5:e4:22:ae:
18:8e:d9:6a:f8:43:a2:7f:76:f1:7b:fb:6c:86:8f:cd:0a:dd:
99:1f:7c:6e:52:77:de:5f:f1:c9:63:c0:4f:33:1f:84:ea:1a:
7d:c1:67:69:1e:8b:1c:dd:2b:a6:51:09:21:f8:03:fc:57:b6:
3e:7d:66:5c:18:9e:7b:f3:a3:1a:e8:1c:f7:43:9d:f1:a1:16:
02:3f:fc:fd
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAfe+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYwNjE5MzMzMFoXDTI4MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcw
REFFOTEwNDIzNjExQTMxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDh9ETL19oa3IDdB5JTK0WyG/kiCdFMjU66X3SxnKrfUaZioyfhjhQnLLQ+rxW4
xIK6AieW5GfE0kjDmIaKYAQmYXK25lwChfqr7b/xjUGKnR5c702o8+vM7RRXMxg9
WJgbLnMgH42KQnE5XJ2jmcpVbtKIB8cb0XlIX+H+iNrkp5h/WKje11K0fJtfVa6l
LrKiKWzvDOjP2VP3rlXm8qkQaObkjHUUBhAL08ZTMudBWT4n5J/8dUERJOIaL4zC
Ic/iAXoSQbl5vq12E1hEwR5UMzYW9I4vlD09+ZPAhRafWjL1t4Gn2nM75KgKXZMu
1H+iRQ2HprI0LzxG3SCrM6mVAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUxlT8R2zf
LjBr4ncNrpEEI2EaMZIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThBNzUwLzQ1MUQ2QTZBMDZBRjExRUU4NzlBNzA0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6
ZkxqQnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk0ZMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9YoMA0GCSqG
SIb3DQEBCwUAA4IBAQB4mdjH1q0E7wrShDHST7cNMtJJ2wsMWaqtWeV0+IFRHwW5
I4oJTGMQ21n6P5Q5oaduEYX8o+iXswvbmGQgUvbghA5yr0wJLhZXzNs+NjNaGuIP
Aecs1HQflvqvn+XCZ0SCRFY4R2v+AdXmGNxr7HdTxSZYaib2Uqcz1IcCJSRxjkbf
yWAmr4ijPa9AkFE9RB2h9LIkhxLC7kVxJ6Y8mUAU1gZZ8zbYlBPuMYoChdz4QuXk
Iq4Yjtlq+EOif3bxe/tsho/NCt2ZH3xuUnfeX/HJY8BPMx+E6hp9wWdpHosc3Sum
UQkh+AP8V7Y+fWZcGJ5786Ma6Bz3Q53xoRYCP/z9
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:22:15 2024 by rpki-client on console-fra.rpki-client.org