Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer (raw, json)
Hash identifier: cjwYOKYEHABtGjyyZZUk4qjvTCs0p6+cpeY/ED89AfY=
Subject key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021587
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Oct 2024 20:19:19 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132491
IP: 103.73.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 12:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136583 (0x21587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 20:19:19 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:09:55:47:78:ba:13:d4:54:4c:9e:c7:f0:
c4:fc:e2:70:bd:15:fa:89:e6:c8:a1:eb:6a:36:7a:
80:5b:2f:c9:54:4c:fe:c8:fa:e1:08:29:9c:c4:55:
ae:95:23:27:ff:0e:e7:73:5c:a0:05:a4:47:d6:a1:
2e:6a:a3:a6:16:71:8c:00:02:1c:39:66:87:1c:fb:
d3:8a:83:64:35:ba:24:85:a4:9b:ae:a2:00:a4:e9:
54:6e:1b:ee:a4:81:a0:26:97:8d:20:86:e0:f7:36:
c0:9a:19:1f:bf:fb:c9:62:87:b5:26:cc:b0:4c:54:
7a:10:95:e8:2e:17:69:d8:60:77:e8:20:ae:d1:48:
01:fc:9f:0c:8a:04:f7:c9:7e:2f:9a:16:11:e8:ae:
1f:7f:61:f8:f1:38:a9:65:f1:ab:0a:67:aa:f3:63:
0a:e2:4c:71:39:7b:0e:8c:e1:c0:73:3c:61:75:30:
eb:cb:8b:55:fe:15:e6:47:a1:8a:7d:b5:1e:6b:8f:
e6:b5:4f:41:f0:e2:94:dc:89:5e:af:28:d4:89:2d:
67:07:f1:06:60:c6:e7:7f:94:08:2f:14:21:eb:a3:
86:cd:4e:5f:ca:56:77:97:c6:07:8a:c6:38:7d:bd:
c2:1e:0a:0d:f1:d6:a0:c8:55:18:a7:ca:b5:53:ca:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132491
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:f5:33:7f:44:71:cf:7b:e3:ab:70:d0:1f:6d:a7:1d:38:6d:
32:82:82:66:00:10:f4:7c:2b:ed:80:6a:c4:f0:62:83:52:ff:
b1:46:8a:fe:2a:7b:7a:05:d8:20:ea:1a:79:d5:ee:09:e4:a8:
9d:63:bf:ba:e5:51:ad:52:d1:74:5e:5e:1b:c9:0b:fd:3c:0f:
ce:c8:d0:9b:a5:56:c4:c2:fd:ab:39:86:2e:f9:48:f8:e1:dd:
42:f3:1a:46:af:d5:7f:41:e3:3b:cb:96:1c:b5:9a:d8:6e:46:
64:0b:42:b6:f2:d0:78:d1:97:e4:9e:6d:a2:6c:2f:65:fa:65:
e8:6d:46:2a:d5:9d:77:cc:12:c4:6e:ee:31:28:15:39:7c:93:
7d:44:17:63:a1:01:a9:22:5d:6e:a9:05:6f:44:4a:89:d6:05:
49:0c:b5:2b:03:0e:0f:ce:45:dc:1a:77:1e:ea:98:a8:51:ae:
6a:13:ea:a0:89:87:01:5c:ce:b3:cc:9f:c6:78:ee:d5:44:ef:
56:05:7a:a1:b9:f5:60:93:44:cb:74:32:99:5a:88:90:1a:35:
c8:41:c3:25:22:fb:3e:38:7f:59:36:b0:48:ec:e3:a8:b2:be:
8a:47:3e:d2:3c:db:01:3b:81:c7:56:4a:da:a0:59:3a:4f:c6:
18:03:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:36:18 2024 by rpki-client on console-fra.rpki-client.org