Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer (raw, json)
Hash identifier: XTdgE0Q2QluM3Mg2GCr73BGir6yvo9SaktVmJVzUj/Y=
Subject key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CA66
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 Nov 2023 12:30:17 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 131243
IP: 103.41.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117350 (0x1ca66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 12 12:30:17 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:27:ee:5b:2c:5a:da:03:ce:48:b1:da:55:
e0:31:e4:8e:47:39:ac:f0:06:4a:35:d1:cb:4c:74:
87:0a:51:2d:77:00:ad:b2:4e:d5:8a:d9:72:ce:a8:
7b:de:d8:36:71:80:75:c9:83:e6:57:86:81:7f:16:
74:70:ac:bc:55:eb:43:58:a0:e7:44:3f:b8:05:96:
0f:4e:1a:94:56:f2:cf:64:75:c7:d3:de:64:28:8c:
7e:fd:66:12:47:9f:ae:fd:e8:1e:02:e7:89:68:a6:
21:d9:91:97:a9:91:0f:dd:00:a2:bb:4d:05:f1:5b:
f7:6a:17:8a:7a:20:ba:0b:1a:6e:e6:c1:e4:0e:a3:
8a:71:61:35:8a:60:6a:c9:95:aa:7b:d4:c7:e2:52:
9d:7e:96:6b:0d:db:fa:2c:74:3d:2a:37:da:db:26:
41:de:e4:91:cf:65:0b:ed:f7:4e:cf:3c:34:a9:19:
ad:6a:c7:aa:94:80:3e:fc:03:16:5d:59:35:60:af:
39:42:e3:bc:48:10:8a:f2:30:c5:5c:75:e9:76:60:
6e:04:d5:af:4d:cb:6b:6c:02:36:c5:f5:cd:1c:98:
3c:8b:00:67:b4:ea:3c:ed:5f:af:c5:48:ff:49:ee:
22:48:24:1b:79:9c:bc:11:18:9a:81:88:a8:ee:46:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131243
sbgp-ipAddrBlock: critical
IPv4:
103.41.114.0/23
Signature Algorithm: sha256WithRSAEncryption
72:da:9d:c5:9f:c7:9c:4a:b7:11:b5:e9:cb:38:c2:49:50:91:
58:05:54:3c:82:53:fe:50:8d:3c:0b:8e:9e:ae:be:d8:d2:76:
32:0e:5f:78:b9:a6:5d:df:80:26:8e:c9:62:90:94:ce:52:71:
6c:96:f5:bd:44:7b:1e:b0:ac:c8:fd:e4:96:f9:8e:95:ed:79:
19:fc:56:f9:61:01:35:ce:bc:75:d0:e4:15:95:02:02:3c:e6:
7a:69:0c:c7:d2:02:5c:99:25:2d:d2:cf:6f:99:3a:bf:16:b4:
21:7a:de:fc:bd:75:60:c7:80:60:5d:e2:c9:10:47:25:25:4c:
d1:72:1c:e8:08:6d:49:bc:f9:e0:bd:c3:7d:4d:2e:4a:20:38:
2e:8e:e0:cd:0e:80:aa:8d:17:b4:4d:49:38:4d:f4:f6:32:b1:
c7:20:04:8d:fe:1f:f0:5b:0f:79:fe:9e:4c:b3:fb:ef:02:1c:
8b:ae:97:04:f4:b4:a7:32:d4:e2:dc:ce:ca:10:bc:68:94:ff:
b7:ff:9f:22:e9:14:60:7c:71:93:fd:4a:1e:da:8e:cc:04:d5:
8d:fe:7e:64:67:1f:21:1c:5d:2b:40:02:c7:8f:78:0e:27:36:
38:fc:09:8c:1a:63:76:49:22:bb:83:00:27:1f:42:1f:64:c8:
86:45:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:47 2024 by rpki-client on console.sobornost.net