Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
File: T96UkP8v8-m_k7SY108x916p_P8.cer (raw, json)
Hash identifier: a2yosh9nV44F81+K7EKGh8684EKSsLxVhagSyqJKvgE=
Subject key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0208E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Aug 2024 13:44:02 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138161
IP: 103.121.192.0/23
IP: 2001:df6:5100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133352 (0x208e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 13:44:02 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:9c:7f:48:8b:96:ab:8c:5a:46:09:0b:f3:
9d:ae:51:00:56:ba:97:59:e5:31:dc:f4:bc:16:72:
40:b9:ed:ae:68:e0:7f:9b:ef:1b:54:4b:19:4d:f4:
6a:31:29:f0:bc:18:c5:88:c7:49:67:33:ba:44:50:
40:3e:43:13:7c:41:1e:30:5b:54:d9:83:47:08:f5:
92:37:28:be:27:dc:40:11:66:b5:af:a0:88:c1:8f:
96:28:79:92:68:dd:c5:7a:c0:7c:54:0c:14:c5:79:
a6:fd:f8:02:5d:d6:9b:e9:07:57:4d:9d:ba:ab:dd:
c3:56:ea:ae:c5:02:dd:a8:a0:43:33:c7:d9:a4:34:
82:ad:4d:0d:b4:e4:14:30:36:30:ac:c6:26:38:51:
d8:f1:82:0c:fd:17:af:25:64:3e:37:30:89:50:47:
03:59:cd:5f:61:3a:3b:40:fb:12:e9:72:70:de:fd:
d1:f2:09:24:77:59:f6:80:7a:81:72:4c:23:c9:ed:
01:24:dc:e0:66:f1:df:01:a5:9f:ce:6b:c7:9a:73:
4d:e7:c4:77:70:d7:4a:f4:b0:dd:f0:27:14:c7:7e:
49:ec:d3:dc:d5:19:19:2b:3f:be:37:e3:78:a3:38:
fa:11:48:81:e8:bb:26:5f:fe:84:6e:ce:0a:54:0f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138161
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/23
IPv6:
2001:df6:5100::/48
Signature Algorithm: sha256WithRSAEncryption
31:06:f1:d2:0a:2a:bf:8c:8e:c8:21:17:ca:6c:d5:86:08:8c:
20:48:c4:8e:d1:60:84:72:3f:90:ad:85:7e:84:c3:63:16:bd:
4e:9c:a9:9e:9a:45:dc:ea:35:5e:7b:4e:01:a0:bb:24:be:a1:
aa:c4:b1:ec:4d:2c:35:42:c9:7a:27:96:27:3a:b5:5d:05:26:
e9:28:cd:54:0f:a4:06:fd:a1:f1:53:5d:e9:c2:7e:2b:02:6a:
74:1f:ea:2e:38:85:51:04:6b:cc:a8:68:31:fc:be:e7:bd:1b:
c2:51:43:13:78:89:51:62:01:ef:fc:f9:24:b2:1f:e8:b5:57:
11:84:71:5a:31:e1:56:48:6f:87:29:2c:69:3b:76:0f:e0:28:
46:f1:ca:8a:d1:1f:f5:f0:9c:51:b4:2b:f8:73:5d:3f:75:e9:
91:23:e2:ca:3d:e1:79:bd:58:32:80:5e:57:cd:13:b6:72:30:
a5:32:8e:2b:de:cb:87:67:cd:d1:06:a0:ac:1e:db:c4:bc:74:
18:30:74:40:4d:e5:cc:72:16:87:c0:e5:8c:06:06:d1:8a:d0:
14:36:4f:17:be:31:61:e3:9a:57:dd:13:d3:aa:17:03:9a:ab:
38:db:1b:21:b5:1f:13:3d:75:ea:ba:62:ff:b1:3e:30:e9:a3:
2e:e3:b2:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:51 2024 by rpki-client on console.sobornost.net