Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
File: RxYGeFsy9N8-yUPyp4fbohJpbh8.cer (raw, json)
Hash identifier: t7cy+1hRT4CfxI87q3A42gr0kTbHB9ARxUjFZNZdvyM=
Subject key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0212BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Oct 2024 14:59:45 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 7712
AS: 132213
AS: 133588
AS: 146995
IP: 103.7.144.0/24
IP: 103.237.52.0/23
IP: 118.67.200.0/21
IP: 2001:de8:1d::/48
IP: 2405:aa00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135869 (0x212bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 14:59:45 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:d2:16:08:c8:3c:d5:e5:f6:61:77:4d:3a:
f7:f7:c2:bf:92:d4:da:7c:46:e3:3a:10:d9:48:d5:
af:6a:52:bb:cf:56:d0:a2:c5:da:3a:6d:30:c1:8e:
64:ce:e9:9e:fc:34:d0:f5:2c:a8:18:ab:89:b4:74:
1b:fe:fc:55:18:70:b7:c8:3b:d6:78:e4:21:0e:f5:
47:c4:42:6f:4a:85:bb:fa:bf:94:48:26:66:d5:36:
4e:fe:59:63:61:4b:15:0f:96:55:32:c3:16:4d:74:
8a:c5:08:ed:9a:78:2e:19:4d:e0:9b:4c:2e:49:7f:
7a:76:4b:32:67:20:99:7e:20:15:65:9e:ae:f4:6d:
1c:8e:73:45:05:fe:d8:2e:fb:8d:20:e2:85:41:27:
6d:74:7f:05:26:2f:63:6b:83:1e:a3:e7:46:f4:b5:
85:f5:4a:ed:fd:56:2c:45:72:d9:34:c2:d2:fd:62:
92:30:93:de:28:24:81:cc:2d:7e:b3:a9:2d:a0:01:
9d:ca:8d:d5:e2:c8:ec:ff:48:8b:94:f2:10:71:13:
f6:f7:99:e4:a6:ac:52:0f:ea:c4:d8:95:4f:69:c8:
35:f5:9a:3b:d6:a2:4e:4a:f0:7c:36:1c:e9:fb:f2:
bc:61:34:56:80:81:e9:a9:ed:00:c7:42:35:90:ff:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7712
132213
133588
146995
sbgp-ipAddrBlock: critical
IPv4:
103.7.144.0/24
103.237.52.0/23
118.67.200.0/21
IPv6:
2001:de8:1d::/48
2405:aa00::/32
Signature Algorithm: sha256WithRSAEncryption
06:6e:a6:10:56:7d:76:cc:ce:8c:38:82:39:7e:4f:e3:c6:51:
23:f0:f8:66:45:9c:1a:af:91:1b:8b:77:84:98:cf:7e:3e:7c:
89:c6:e0:93:72:09:cc:0a:be:94:46:ba:05:c8:e7:0d:10:ab:
68:35:9c:ae:50:6f:4a:fa:cc:10:98:f9:fd:6c:f1:67:d8:92:
9a:49:5b:99:0e:58:a7:04:7f:d3:d5:29:8a:7f:50:0e:00:06:
cd:ae:bc:99:09:49:9f:07:72:e4:4f:2b:23:f9:96:05:01:89:
88:f6:ff:c9:85:0e:5f:2b:d8:60:07:95:d4:c8:86:03:4c:93:
c1:8a:39:fd:42:c7:cf:49:27:b2:71:00:06:a3:f7:0c:b5:74:
6e:12:59:16:c4:84:6b:86:f1:ab:af:d6:0b:8e:f6:5f:53:cb:
dd:97:3b:78:22:c1:24:90:1a:77:d5:1f:b8:3f:ac:49:6c:a2:
41:e7:71:e5:87:78:54:90:91:38:79:99:03:82:f6:be:2a:bf:
b0:47:e1:e8:ac:0d:e7:11:89:f2:bd:21:be:b6:ad:f2:24:df:
c4:f2:61:1a:32:2b:3d:d5:46:d9:65:f3:22:35:9f:c8:be:58:
05:0e:33:3a:a7:01:eb:12:fe:70:58:b2:46:73:7d:8d:77:0b:
d8:8e:17:2e
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIDAhK9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwODE0NTk0NVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNG
MkE3ODdEQkEyMTI2OTZFMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYidIWCMg81eX2YXdNOvf3wr+S1Np8RuM6ENlI1a9qUrvPVtCixdo6bTDBjmTO
6Z78NND1LKgYq4m0dBv+/FUYcLfIO9Z45CEO9UfEQm9Khbv6v5RIJmbVNk7+WWNh
SxUPllUywxZNdIrFCO2aeC4ZTeCbTC5Jf3p2SzJnIJl+IBVlnq70bRyOc0UF/tgu
+40g4oVBJ210fwUmL2Nrgx6j50b0tYX1Su39VixFctk0wtL9YpIwk94oJIHMLX6z
qS2gAZ3KjdXiyOz/SIuU8hBxE/b3meSmrFIP6sTYlU9pyDX1mjvWok5K8Hw2HOn7
8rxhNFaAgemp7QDHQjWQ/6ZZAgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQURxYGeFsy
9N8+yUPyp4fbohJpbh8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ2QjI4L0ZBRUY4Q0JFMTM0MzExRTU5NkY1NDAxRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NkIyOC9GQUVGOENCRTEzNDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZz
eTlOOC15VVB5cDRmYm9oSnBiaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKAYIKwYBBQUHAQgBAf8EGTAX
oBUwEwICHiACAwIEdQIDAgnUAgMCPjMwQwYIKwYBBQUHAQcBAf8ENDAyMBgEAgAB
MBIDBABnB5ADBAFn7TQDBAN2Q8gwFgQCAAIwEAMHACABDegAHQMFACQFqgAwDQYJ
KoZIhvcNAQELBQADggEBAAZuphBWfXbMzow4gjl+T+PGUSPw+GZFnBqvkRuLd4SY
z34+fInG4JNyCcwKvpRGugXI5w0Qq2g1nK5Qb0r6zBCY+f1s8WfYkppJW5kOWKcE
f9PVKYp/UA4ABs2uvJkJSZ8HcuRPKyP5lgUBiYj2/8mFDl8r2GAHldTIhgNMk8GK
Of1Cx89JJ7JxAAaj9wy1dG4SWRbEhGuG8auv1guO9l9Ty92XO3giwSSQGnfVH7g/
rElsokHnceWHeFSQkTh5mQOC9r4qv7BH4eisDecRifK9Ib62rfIk38TyYRoyKz3V
Rtll8yI1n8i+WAUOMzqnAesS/nBYskZzfY13C9iOFy4=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:50 2024 by rpki-client on console.sobornost.net