Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer (raw, json)
Hash identifier: qwlzOpphx84WlU3/2IdykI/LlkNpnrcZK3wkdBgoSNo=
Subject key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F229
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 May 2024 22:27:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 55581
AS: 134440
IP: 27.116.36.0/22
IP: 45.125.120.0/22
IP: 103.166.56.0/23
IP: 103.194.0.0/22
IP: 2403:3180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127529 (0x1f229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 15 22:27:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:05:9e:77:ab:48:91:2a:8d:98:cf:ab:e1:
69:a1:34:7e:4c:ad:c3:52:9b:6e:1b:c4:4c:3a:85:
66:06:34:99:72:4d:24:ab:1f:34:ea:80:57:98:ce:
40:47:82:13:eb:ed:d6:d7:c5:ab:77:e8:d1:c9:58:
f0:a2:e1:fd:d8:de:c8:cd:f1:8d:e4:20:e8:65:a2:
ac:8e:a6:46:31:0c:4b:4a:0b:ad:07:cc:a4:26:cb:
48:96:05:c5:11:cd:11:98:bb:04:6c:8b:37:01:04:
92:86:59:c9:9c:96:1f:9f:cc:ff:2c:37:11:90:76:
6d:1a:84:f1:4c:b8:c9:34:01:53:e8:fc:b1:c5:11:
60:cf:96:9b:6e:82:1f:6a:ac:9b:6f:ef:c3:59:06:
89:de:8e:9c:51:93:c4:4a:3c:c0:76:dc:1b:36:18:
30:39:f6:df:4c:0f:95:95:57:8d:6d:4f:23:95:76:
ca:06:99:d9:35:a8:6b:a5:cf:e9:1c:20:b4:37:f1:
d6:83:a8:ab:7b:23:64:c4:2d:2e:b1:9a:26:fd:47:
dd:54:3c:23:f4:28:88:64:1a:58:5a:a9:80:b9:07:
32:90:63:8d:07:2e:99:e5:af:a3:4d:f3:a2:81:dc:
7b:0f:ce:34:93:6a:ed:33:8a:38:14:95:5e:f0:2a:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55581
134440
sbgp-ipAddrBlock: critical
IPv4:
27.116.36.0/22
45.125.120.0/22
103.166.56.0/23
103.194.0.0/22
IPv6:
2403:3180::/32
Signature Algorithm: sha256WithRSAEncryption
a7:6f:f6:4e:91:89:34:78:9b:94:72:71:9a:9d:10:40:19:12:
c7:44:7c:c3:77:aa:b7:78:ae:ad:dd:f2:4b:a8:4c:30:96:99:
e0:f3:c2:2b:08:8e:19:e4:f9:c0:49:c2:41:ed:1f:71:b2:2b:
68:fa:61:05:2a:0b:7d:bf:9b:d6:f1:29:0b:1b:9b:55:22:08:
57:1b:78:2f:3f:5d:51:ba:d3:1a:f8:21:83:c9:58:d9:d7:32:
48:52:39:f0:65:13:7a:17:f4:e0:90:0b:49:e1:41:e2:6a:fe:
0d:4c:29:e2:01:13:dc:f4:73:5a:bf:db:ee:cf:20:93:fb:21:
f4:d9:9f:dd:02:c4:88:49:85:1b:f0:da:d4:2e:55:2e:b6:35:
0c:a3:ae:a7:61:0f:19:7a:62:90:01:39:45:b3:5c:73:55:39:
bd:ae:07:76:15:ac:d6:f7:bb:bf:07:6e:ba:ef:1d:c0:3b:a4:
b5:ef:48:38:dd:d0:21:52:6d:ff:de:07:b5:1e:d7:37:4f:c5:
90:4d:de:1f:56:25:8e:4f:97:d1:c2:fa:e5:a5:86:fa:6c:a3:
68:a6:b2:58:19:15:9d:75:f6:67:9b:63:f6:db:06:be:a1:e2:
87:8e:49:f6:d5:cc:a3:36:62:1d:28:d6:62:9e:1c:b9:3f:e2:
6c:06:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:07 2024 by rpki-client on console.sobornost.net