Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
File: tnwkXksr7q0jwfBd0w_5B32HuOY.cer (raw, json)
Hash identifier: osdRZV5//CYlvCudvnLgadYJ+0SrV/LkfkEGhamtDJU=
Subject key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020428
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Aug 2024 12:22:52 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 133539
IP: 103.121.8.0/22
IP: 2403:61c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132136 (0x20428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 12:22:52 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:39:0c:58:e6:35:72:b3:6d:82:1f:f3:dd:
05:56:8a:f9:40:67:fb:a9:c9:da:3d:75:c4:4e:01:
fe:6f:bc:0a:4f:1a:12:fc:90:1d:dd:8f:07:59:fb:
ed:36:2d:e4:05:b4:59:f0:01:a0:d9:4c:90:d7:60:
22:1c:0a:79:a0:1b:4c:1a:f0:a2:85:6e:d6:08:b5:
e6:f8:29:6d:7b:06:2b:39:22:b9:34:a9:a1:3f:f0:
ba:82:9c:82:43:f5:39:af:d6:ee:72:a9:31:af:31:
20:83:b3:8b:a4:15:87:ac:5f:62:5a:69:04:a2:58:
9c:b7:3d:b2:c5:c9:13:55:26:67:f4:6f:1c:c0:b8:
c6:7a:75:f5:b5:3a:f7:55:ec:29:2d:3d:71:4b:81:
eb:c6:b3:3a:31:92:bd:86:20:e7:d7:df:78:cd:6c:
ba:44:a1:96:03:bf:f8:eb:81:01:70:64:14:a1:6d:
0a:98:57:21:f2:63:4b:4c:f1:f9:2f:25:45:4e:bf:
59:25:5b:53:fe:e7:19:4d:0a:97:eb:bd:a2:3a:6e:
2f:12:b7:8a:2d:dc:c0:65:4e:b1:d8:a6:b9:06:04:
6a:99:0f:0e:f3:cc:35:3f:53:9b:3b:3a:1e:ac:cb:
7e:1f:a8:84:46:0d:27:f6:03:99:9a:c2:78:22:15:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133539
sbgp-ipAddrBlock: critical
IPv4:
103.121.8.0/22
IPv6:
2403:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:c0:3e:f1:07:11:cc:eb:2c:af:88:ed:70:cd:2c:21:21:74:
ae:33:7c:a8:06:17:be:8e:c6:f5:0c:3a:ed:52:6e:d2:cd:48:
cc:fb:06:6f:58:80:3c:26:45:91:19:04:4e:3f:58:b9:b8:a9:
c0:37:b0:2a:b5:b6:11:58:10:f4:f6:b5:e9:bc:af:a9:6d:a7:
41:ca:b6:e5:e2:45:d1:55:7f:d2:00:97:c3:25:cf:fc:cb:55:
6d:53:c5:0e:43:ce:e6:86:cf:5f:1c:27:55:d0:56:74:a7:7d:
2e:80:8e:c7:1e:63:23:5c:fb:51:82:e0:cf:cd:61:3e:f6:06:
a2:bb:5d:ea:31:e4:4f:d6:fd:4f:94:b9:43:c5:28:75:c7:76:
86:2d:1e:40:72:24:5f:43:2f:63:75:92:9e:78:5d:b8:15:23:
4a:32:d9:c4:e6:26:37:95:d7:6d:e0:f6:86:0f:1b:fc:fa:40:
1b:c5:3c:84:90:80:a4:4b:8f:ee:be:09:78:e6:9f:53:c4:f8:
f0:1d:0e:37:ed:fe:74:f1:e9:37:e4:2a:39:2c:14:c1:8c:67:
34:59:b4:19:68:b2:dd:11:99:0a:c0:7c:7d:92:ab:da:8e:ed:
ce:ae:b5:9b:22:74:8c:87:41:aa:fb:05:c3:15:08:ff:a6:d4:
69:fc:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:11 2024 by rpki-client on console.sobornost.net