Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.cer (raw, json)
Hash identifier: zg69MlfdvLx2uw2ZprvfvGgwhmbFfsRVBpMd0GtIy5Q=
Subject key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6198
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 13:34:29 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.30.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24984 (0x6198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 13:34:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A912981B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:54:70:3b:f5:c8:c7:74:9e:f7:cb:23:aa:
66:45:cd:44:8b:e1:c2:7a:fe:af:4c:1c:eb:04:6f:
87:b4:4c:60:6a:3f:98:02:df:8a:b8:ce:02:30:01:
ef:21:6d:29:1c:ce:59:98:ea:40:f6:45:cc:d4:e3:
2d:8f:6b:ce:1c:5a:7c:87:40:79:a8:db:67:94:b5:
db:27:37:c5:9d:d5:f6:fb:2b:0e:d3:4d:44:b9:1a:
e4:5b:52:a5:8b:ab:0f:ec:45:6f:97:dd:e4:fb:8a:
1f:9d:9a:52:c9:6c:8a:6b:ac:e3:e9:f3:67:7a:85:
0f:44:c1:8c:63:a9:df:d0:15:17:24:36:05:25:ca:
68:b8:47:a5:5f:2b:b8:9e:ac:99:98:5e:25:b0:58:
19:37:d8:31:e6:d6:23:13:99:44:70:30:63:1a:0c:
53:1c:92:38:a2:60:0c:48:ff:ab:7d:47:40:11:93:
6c:9e:f1:7b:d6:ec:97:b9:99:fb:6e:02:14:5c:ff:
e0:bc:4e:dc:56:44:70:d0:ff:b7:b3:e8:95:bb:8d:
6c:92:13:db:44:41:d4:20:cc:bc:64:9b:42:05:b6:
bd:ad:c7:d1:1f:f5:2d:09:18:9c:6b:25:b8:61:1e:
b3:c5:5b:f8:f1:5d:cf:71:b8:23:53:4d:28:54:dd:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.30.0/23
Signature Algorithm: sha256WithRSAEncryption
90:6b:9d:f3:af:03:66:76:60:d7:d0:7f:30:93:67:6e:64:86:
d7:24:e3:9f:c2:93:8b:b3:3d:be:d0:61:9e:f3:f0:d7:18:20:
8f:34:7e:61:e6:c9:ac:53:ad:1d:16:f2:26:55:f7:bd:47:5a:
7b:d8:59:80:f6:90:9c:25:e2:dd:49:21:b4:9f:a7:b8:a4:56:
1f:7d:d4:07:b7:ae:d0:91:3f:98:dd:1b:d2:77:f9:f2:53:eb:
d4:2a:96:88:2d:fb:cd:e6:1e:50:bf:2f:58:f1:fc:e2:c2:05:
0e:c9:cc:f2:7c:a3:c5:3a:cd:fd:b3:0c:a3:8f:f6:3f:b9:26:
04:1e:62:2b:b3:24:70:92:96:1a:a5:bb:25:21:d5:a7:4c:9a:
08:28:10:44:1a:54:a0:29:24:57:07:97:94:a1:f7:7f:27:58:
ef:8a:63:f0:42:f3:fb:f1:b5:0f:9c:80:62:4b:17:73:21:16:
73:c7:57:50:73:12:89:c0:73:32:c9:6e:f5:48:e8:bc:29:2a:
a3:99:30:88:52:d2:71:a3:9d:7a:ab:1f:ff:c4:c7:87:88:37:
46:ab:1d:8b:a5:eb:34:35:d1:a3:da:c8:93:8f:94:31:b1:3f:
f7:90:17:4f:82:61:cc:e4:f8:d5:ca:aa:d0:26:fe:bd:a5:4a:
40:09:de:3c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTMwMTMzNDI5WhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyOTgxQjExMC8GA1UEBRMoMzM3QjQ1MEZEREM5RkM3MDIyMURBNUNB
MDk3ODU4ODVCMUQxQjdDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKdGVHA79cjHdJ73yyOqZkXNRIvhwnr+r0wc6wRvh7RMYGo/mALfirjOAjAB7yFt
KRzOWZjqQPZFzNTjLY9rzhxafIdAeajbZ5S12yc3xZ3V9vsrDtNNRLka5FtSpYur
D+xFb5fd5PuKH52aUslsimus4+nzZ3qFD0TBjGOp39AVFyQ2BSXKaLhHpV8ruJ6s
mZheJbBYGTfYMebWIxOZRHAwYxoMUxySOKJgDEj/q31HQBGTbJ7xe9bsl7mZ+24C
FFz/4LxO3FZEcND/t7PolbuNbJIT20RB1CDMvGSbQgW2va3H0R/1LQkYnGsluGEe
s8Vb+PFdz3G4I1NNKFTdCsMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQze0UP3cn8
cCIdpcoJeFiFsdG3zDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk4MUIvQkM1Q0VBQjZDQThBMTFFRUIwNTZFNjFGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5ODFCL0JDNUNFQUI2Q0E4QTExRUVCMDU2RTYxRkM0RjlBRTAyL00zdEZEOTNK
X0hBaUhhWEtDWGhZaGJIUnQ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KHjANBgkqhkiG9w0BAQsFAAOCAQEAkGud868DZnZg19B/MJNn
bmSG1yTjn8KTi7M9vtBhnvPw1xggjzR+YebJrFOtHRbyJlX3vUdae9hZgPaQnCXi
3UkhtJ+nuKRWH33UB7eu0JE/mN0b0nf58lPr1CqWiC37zeYeUL8vWPH84sIFDsnM
8nyjxTrN/bMMo4/2P7kmBB5iK7MkcJKWGqW7JSHVp0yaCCgQRBpUoCkkVweXlKH3
fydY74pj8ELz+/G1D5yAYksXcyEWc8dXUHMSicBzMslu9UjovCkqo5kwiFLScaOd
eqsf/8THh4g3Rqsdi6XrNDXRo9rIk4+UMbE/95AXT4JhzOT41cqq0Cb+vaVKQAne
PA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:47:25 2025 by rpki-client