Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
File: vttNMcgBx4se-jSHY50DVayRNUs.cer (raw, json)
Hash identifier: AQyY650knL+JBzWmt06zIahXgzHl72zI5CkCkxCdg0I=
Subject key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 612B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jan 2025 05:14:18 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.220.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24875 (0x612b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 20 05:14:18 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91CB063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:21:b0:90:12:dc:ad:0c:dc:a2:e7:16:80:
c4:03:f0:4a:1b:e2:03:f2:ca:c8:a1:e1:0d:48:6e:
23:b4:1b:70:74:79:60:94:b8:54:71:a0:78:96:25:
1f:a0:c0:2a:4f:65:b2:50:34:96:ba:65:cd:b4:80:
62:5a:55:d6:42:c8:91:8a:e0:db:a1:59:30:ec:2e:
00:4b:1e:5f:16:52:1a:0a:f8:b0:f3:5b:3a:c1:cb:
59:eb:68:89:47:48:11:b0:94:0a:d1:d4:e2:be:c7:
7d:d9:a1:3c:a5:be:99:fb:29:b2:f6:9b:d8:43:47:
32:7d:4b:bc:66:94:d5:20:4b:c1:a7:a1:fa:d7:02:
1b:3c:ed:8e:5c:97:08:5c:e6:22:96:46:66:0e:48:
5b:2a:0b:7c:5c:26:8b:0b:bb:6c:1d:ea:97:c3:11:
66:8d:e8:e3:e7:95:0f:f7:30:3b:6d:98:02:3a:4b:
42:0c:11:a6:d7:29:8d:d7:57:c8:a9:83:5a:53:43:
52:aa:c4:65:78:d1:d4:fe:f7:5e:17:70:54:6b:39:
e2:c0:ae:90:f3:e3:db:87:0b:ad:ec:34:b6:3d:53:
13:52:c7:90:f2:ea:d7:54:fa:2a:fa:95:8d:29:4e:
12:f8:4f:80:f5:7e:3f:d3:12:92:3d:d7:68:88:71:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
27:1e:22:2a:14:e7:02:e1:73:d8:37:ae:52:fe:02:b4:98:53:
c2:ed:b3:2d:5f:cd:62:41:75:12:76:ac:82:d1:1e:9b:55:ce:
10:ab:fb:4d:a8:13:db:f3:db:92:0b:83:7b:f2:df:31:b7:32:
52:00:91:b4:69:e4:2b:41:56:ac:d9:d8:79:53:1e:b7:08:61:
b8:e1:f1:75:31:2e:1c:5f:6a:50:87:f6:b6:7e:fa:35:c8:c1:
32:c8:3e:22:e9:ae:03:75:8d:a3:35:d3:ca:8e:90:04:0a:fb:
3d:5f:dd:da:2b:bf:8a:c6:51:91:bb:1c:c0:8f:88:ec:4f:90:
d9:34:f1:ed:1a:c7:d1:79:79:14:7d:89:fe:36:68:c2:7b:96:
d0:d3:79:e9:dc:2c:ed:e8:22:b4:6b:8f:28:d4:34:68:76:e1:
06:ea:66:82:45:95:6e:bc:39:65:90:c9:79:a8:c6:bb:1f:b3:
06:3d:eb:c8:1d:c3:b4:53:8c:73:ac:be:b4:04:58:ae:f1:49:
3a:44:77:13:34:42:9d:a7:d8:7f:10:2e:1b:f7:78:ca:01:65:
71:75:ec:b0:20:df:be:df:23:a7:1f:a5:f9:99:2a:5d:74:0a:
32:ae:ef:2a:18:45:cc:1b:16:82:d2:fe:ee:0e:34:52:02:dd:
8c:9b:a0:da
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTIwMDUxNDE4WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDQjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3
NjM5RDAzNTVBQzkxMzU0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMKdIbCQEtytDNyi5xaAxAPwShviA/LKyKHhDUhuI7QbcHR5YJS4VHGgeJYlH6DA
Kk9lslA0lrplzbSAYlpV1kLIkYrg26FZMOwuAEseXxZSGgr4sPNbOsHLWetoiUdI
EbCUCtHU4r7HfdmhPKW+mfspsvab2ENHMn1LvGaU1SBLwaeh+tcCGzztjlyXCFzm
IpZGZg5IWyoLfFwmiwu7bB3ql8MRZo3o4+eVD/cwO22YAjpLQgwRptcpjddXyKmD
WlNDUqrEZXjR1P73XhdwVGs54sCukPPj24cLrew0tj1TE1LHkPLq11T6KvqVjSlO
EvhPgPV+P9MSkj3XaIhxLQMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS+200xyAHH
ix76NIdjnQNVrJE1SzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IwNjMvNjNCNDc2MDJENkVEMTFFRjlEOUJGMzZBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCMDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dC
eDRzZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH43DANBgkqhkiG9w0BAQsFAAOCAQEAJx4iKhTnAuFz2DeuUv4C
tJhTwu2zLV/NYkF1EnasgtEem1XOEKv7TagT2/PbkguDe/LfMbcyUgCRtGnkK0FW
rNnYeVMetwhhuOHxdTEuHF9qUIf2tn76NcjBMsg+IumuA3WNozXTyo6QBAr7PV/d
2iu/isZRkbscwI+I7E+Q2TTx7RrH0Xl5FH2J/jZownuW0NN56dws7egitGuPKNQ0
aHbhBupmgkWVbrw5ZZDJeajGux+zBj3ryB3DtFOMc6y+tARYrvFJOkR3EzRCnafY
fxAuG/d4ygFlcXXssCDfvt8jpx+l+ZkqXXQKMq7vKhhFzBsWgtL+7g40UgLdjJug
2g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:52:14 2025 by rpki-client