Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
File: f3dZIELjyHvlbu2B2cyw6XQCzdc.cer (raw, json)
Hash identifier: QZMxbXlnLjDbtvR2/GKdgkG4oe3uFIIF8YSm3fB+5wE=
Subject key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4970
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Dec 2024 00:36:15 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 86.48.240.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18800 (0x4970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 12 00:36:15 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9192A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:29:c4:27:13:ce:3e:4e:62:01:7a:8a:d9:36:
41:33:16:b1:01:0f:41:bb:71:60:69:8a:c4:d3:80:
40:0c:d0:33:96:4c:63:51:70:38:af:33:48:1e:ef:
26:49:fa:a9:98:fd:49:f8:e8:89:05:2b:6d:05:69:
68:d0:50:59:7c:8a:98:75:c6:cc:d1:e3:72:2a:ca:
e9:b6:f0:44:37:50:be:05:ef:5b:41:2f:6d:a6:3d:
bf:43:34:46:0d:2c:c6:9e:d5:6b:3b:be:21:05:26:
00:56:fe:e9:ab:2f:27:3d:19:de:0c:9e:c3:1c:ee:
5a:8b:cb:fd:a1:c2:5f:ee:0e:15:d3:43:f4:3c:22:
d4:4f:12:4b:3b:f1:58:13:c6:5f:76:24:8a:50:11:
5a:65:34:68:26:8f:81:fa:c7:3c:07:d5:70:20:48:
96:e0:b8:48:24:ce:7a:83:6f:85:7a:ce:6c:f5:54:
76:9e:e7:1f:9b:61:f8:54:0b:6a:0f:9b:0b:35:b0:
38:16:bb:66:38:7f:4f:72:f6:dd:cb:df:a3:bc:40:
40:94:64:3d:97:31:2f:3b:a7:61:63:34:fb:92:c0:
0d:a9:cb:9f:94:94:3c:e3:9f:3d:f2:a5:33:e2:39:
8e:8b:09:2b:10:13:03:4e:92:d7:33:07:86:b6:4d:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
86.48.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:fa:87:63:41:ff:dd:94:9c:29:48:fd:f4:6c:bc:29:ff:3e:
32:45:c3:69:2f:64:94:11:55:32:98:58:37:bc:89:7d:21:0b:
0d:7a:c4:c2:6c:4f:da:94:e1:6b:10:b7:e5:94:33:91:08:1a:
83:ed:ea:ce:6b:b8:7c:04:7d:e6:dc:28:9b:2e:c9:cd:bb:e0:
43:c3:9a:74:a2:c3:21:b7:67:4a:2b:0b:89:32:9c:01:5e:db:
9d:d3:17:11:d0:d2:52:48:90:93:c1:6c:90:cf:8b:45:4e:c3:
0e:52:94:b8:d4:2c:12:40:28:29:a7:40:48:48:c2:47:a2:06:
b8:a7:bd:d7:a5:fb:37:05:7e:6d:8e:ed:8c:1c:6a:d5:97:11:
d0:b6:3b:34:d1:ca:ed:20:02:fe:23:c9:93:7d:a3:91:66:8c:
18:aa:1a:3e:33:d2:74:6a:95:7d:9c:bb:c6:6d:aa:21:2c:9d:
f2:53:a7:12:e7:00:14:24:bc:73:e2:7c:5b:c9:32:b9:9b:a6:
52:2d:7e:f0:b4:f3:e0:e4:e0:11:21:c1:44:30:af:dd:f9:6f:
a8:b8:40:31:54:c8:10:73:1a:b0:ee:ce:5a:60:7e:c7:5f:24:
02:0c:d4:48:ad:94:de:1a:ed:2b:bf:af:8c:85:42:82:58:44:
b7:d1:f6:8a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICSXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjQxMjEyMDAzNjE1WhcNMjUxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgx
RDlDQ0IwRTk3NDAyQ0RENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOspxCcTzj5OYgF6itk2QTMWsQEPQbtxYGmKxNOAQAzQM5ZMY1FwOK8zSB7vJkn6
qZj9SfjoiQUrbQVpaNBQWXyKmHXGzNHjcirK6bbwRDdQvgXvW0EvbaY9v0M0Rg0s
xp7Vazu+IQUmAFb+6asvJz0Z3gyewxzuWovL/aHCX+4OFdND9Dwi1E8SSzvxWBPG
X3YkilARWmU0aCaPgfrHPAfVcCBIluC4SCTOeoNvhXrObPVUdp7nH5th+FQLag+b
CzWwOBa7Zjh/T3L23cvfo7xAQJRkPZcxLzunYWM0+5LADanLn5SUPOOfPfKlM+I5
josJKxATA06S1zMHhrZNybUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR/d1kgQuPI
e+Vu7YHZzLDpdALN1zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJBNDcvMTU5MDdDMjJCODIxMTFFRkFBRTZGNTY3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkyQTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxq
eUh2bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBFYw8DANBgkqhkiG9w0BAQsFAAOCAQEAXfqHY0H/3ZScKUj99Gy8
Kf8+MkXDaS9klBFVMphYN7yJfSELDXrEwmxP2pThaxC35ZQzkQgag+3qzmu4fAR9
5twomy7JzbvgQ8OadKLDIbdnSisLiTKcAV7bndMXEdDSUkiQk8FskM+LRU7DDlKU
uNQsEkAoKadASEjCR6IGuKe916X7NwV+bY7tjBxq1ZcR0LY7NNHK7SAC/iPJk32j
kWaMGKoaPjPSdGqVfZy7xm2qISyd8lOnEucAFCS8c+J8W8kyuZumUi1+8LTz4OTg
ESHBRDCv3flvqLhAMVTIEHMasO7OWmB+x18kAgzUSK2U3hrtK7+vjIVCglhEt9H2
ig==
-----END CERTIFICATE-----
Generated at Wed Feb 5 18:56:52 2025 by rpki-client