Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
File: yzDTXHDfyGaoN8rt_vzm_sv8W18.cer (raw, json)
Hash identifier: gNk69vL6gC4QLFN3hzLQ8Q02bmLYVdkZXiRF65j830Y=
Subject key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FDC7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 16:17:49 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 132274
IP: 45.123.100.0/22
IP: 103.9.148.0/22
IP: 2001:df0:2b8::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130503 (0x1fdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 16:17:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:4b:f5:d0:99:ae:df:6a:7f:1a:cf:66:00:
fa:d4:de:7d:c9:53:00:48:74:28:a6:3c:51:63:1b:
ca:22:55:22:59:21:c2:e1:2f:2c:a8:af:81:47:49:
98:cd:18:ee:6d:64:9d:79:97:ce:2c:86:3e:75:01:
aa:97:79:72:4c:b7:80:f1:35:07:7c:f7:c0:28:e1:
41:18:fb:c7:cf:c6:cf:3d:83:16:54:9a:63:f5:74:
e1:df:a5:01:98:2e:f5:3e:5b:e1:c3:f1:5b:58:a4:
40:d9:a7:5b:70:40:cd:85:8b:85:7b:89:93:b1:de:
89:6b:92:3f:71:f8:a5:c6:68:c6:1b:5e:78:3a:9c:
ff:8a:82:55:20:68:21:0a:9f:bf:c9:88:72:9c:7c:
86:51:b7:35:01:f6:5d:07:06:8b:6e:f5:45:96:68:
66:76:bd:16:c6:fe:78:51:ab:78:23:1a:39:5a:58:
8c:8a:aa:c7:b9:41:25:77:51:37:9a:26:ec:c4:e2:
4f:ae:4a:9f:7e:87:24:92:21:af:76:7d:2c:c5:bc:
a8:5b:6b:c4:39:20:94:f4:89:97:84:dc:15:10:21:
46:e1:a2:15:49:79:0a:62:f0:ea:9e:e9:12:4c:51:
58:b2:c7:d5:8a:48:fd:f6:29:db:52:67:dd:4a:a9:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132274
sbgp-ipAddrBlock: critical
IPv4:
45.123.100.0/22
103.9.148.0/22
IPv6:
2001:df0:2b8::/48
Signature Algorithm: sha256WithRSAEncryption
7e:8e:2b:60:46:fc:ef:65:bd:8b:e2:61:65:23:8a:67:2d:51:
6f:d7:a7:f1:31:76:be:31:5e:ec:48:a1:6a:bf:f0:a3:70:14:
15:d7:3b:c3:ac:37:7e:02:58:22:41:c7:21:ab:59:31:ed:59:
7c:38:23:9c:b4:45:13:96:a7:99:97:41:23:f3:bb:e4:84:cd:
ba:08:98:4a:c8:39:f3:ae:5c:8c:a6:4d:1f:b9:54:69:56:fc:
49:0f:d6:59:48:5f:e2:f3:c5:76:47:4f:47:9d:ff:e3:84:a5:
33:53:fe:53:d0:e9:df:50:a7:b4:71:96:e7:a0:ba:57:ed:cd:
8a:73:38:4b:7c:c6:a3:05:73:03:f8:b8:4d:37:4c:f7:eb:6a:
ea:2c:e9:5a:ff:57:b4:c2:40:a4:e3:f5:93:6a:1c:20:df:8b:
b5:2a:44:30:d9:6a:e4:f9:c5:09:99:cb:ae:ed:35:89:8e:e6:
d3:48:81:47:a2:18:fc:82:40:58:ad:d8:c4:50:19:d4:9e:63:
15:94:d6:f5:16:e4:c8:3f:0e:ff:7f:15:3a:b6:27:48:e9:1d:
f1:f1:ea:5c:13:f4:66:cf:22:cf:6b:5e:32:8d:f4:49:56:80:
4b:ee:b7:ce:3f:12:a6:a9:76:ba:97:06:a2:1a:77:85:c1:3e:
be:5f:67:26
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAf3HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcwMzE2MTc0OVoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FF
REZFRkNFNkZFQ0JGQzVCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPEUv10Jmu32p/Gs9mAPrU3n3JUwBIdCimPFFjG8oiVSJZIcLhLyyor4FHSZjN
GO5tZJ15l84shj51AaqXeXJMt4DxNQd898Ao4UEY+8fPxs89gxZUmmP1dOHfpQGY
LvU+W+HD8VtYpEDZp1twQM2Fi4V7iZOx3olrkj9x+KXGaMYbXng6nP+KglUgaCEK
n7/JiHKcfIZRtzUB9l0HBotu9UWWaGZ2vRbG/nhRq3gjGjlaWIyKqse5QSV3UTea
JuzE4k+uSp9+hySSIa92fSzFvKhba8Q5IJT0iZeE3BUQIUbhohVJeQpi8Oqe6RJM
UViyx9WKSP32KdtSZ91KqQYRAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUyzDTXHDf
yGaoN8rt/vzm/sv8W18wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGMkNGL0Y1QzE0RUQyMDcxMDExRUI5N0Y5RjUzN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RjJDRi9GNUMxNEVEMjA3MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhE
ZnlHYW9OOHJ0X3Z6bV9zdjhXMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgSyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLXtkAwQCZwmU
MA8EAgACMAkDBwAgAQ3wArgwDQYJKoZIhvcNAQELBQADggEBAH6OK2BG/O9lvYvi
YWUjimctUW/Xp/Exdr4xXuxIoWq/8KNwFBXXO8OsN34CWCJBxyGrWTHtWXw4I5y0
RROWp5mXQSPzu+SEzboImErIOfOuXIymTR+5VGlW/EkP1llIX+LzxXZHT0ed/+OE
pTNT/lPQ6d9Qp7RxluegulftzYpzOEt8xqMFcwP4uE03TPfrauos6Vr/V7TCQKTj
9ZNqHCDfi7UqRDDZauT5xQmZy67tNYmO5tNIgUeiGPyCQFit2MRQGdSeYxWU1vUW
5Mg/Dv9/FTq2J0jpHfHx6lwT9GbPIs9rXjKN9ElWgEvut84/EqapdrqXBqIad4XB
Pr5fZyY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:15 2024 by rpki-client on console-fra.rpki-client.org