Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.cer (raw, json)
Hash identifier: k6nnxu80JhZ/8uF9osuiZPBvtfwViFbhoyW+ECtj+lA=
Subject key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F58
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 21:49:14 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.164.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24408 (0x5f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 21:49:14 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D837B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:57:8b:1a:26:3c:2b:d2:db:81:47:ec:e1:
d6:ff:c7:47:ac:dc:f5:f4:a7:db:91:d6:b2:4a:c7:
0d:14:bf:6f:a3:e3:48:4c:35:2a:3c:10:a9:a6:a9:
e7:34:cb:91:de:18:ff:51:4a:c7:03:75:5a:ef:b0:
76:ee:9f:a0:f8:3e:03:5d:31:3f:e1:17:ab:03:3a:
f5:3e:31:33:60:97:f3:5f:24:85:77:3a:49:b4:28:
ee:b7:e8:64:88:7c:ea:74:50:37:4e:08:1f:b5:ad:
e5:fd:35:ad:46:68:9e:8c:3b:f5:78:df:01:6e:c3:
3c:63:0f:e5:76:49:55:27:99:04:de:21:cc:08:81:
c6:a2:ee:a4:36:65:3d:32:e1:e4:f4:ed:74:a7:91:
7f:21:90:a2:6e:a9:46:22:5a:43:44:be:d4:c4:21:
15:7d:97:7e:f1:e5:52:66:80:20:54:9e:af:4d:34:
b0:a6:a7:e6:38:8a:95:34:47:b6:0c:90:97:ed:76:
5a:41:cc:9e:13:5e:1d:e7:71:41:07:8c:47:53:1e:
a6:47:7c:61:81:95:81:b7:a7:61:3a:b2:69:91:eb:
94:04:71:8d:17:49:32:07:fa:49:d6:c5:f8:a4:93:
b4:00:85:35:10:eb:c5:93:0e:1b:25:31:1a:f9:3e:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.164.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ca:17:d1:be:d8:fe:35:f3:1f:d2:31:93:3c:1b:3a:ad:7e:
f2:9a:6a:91:25:d3:d2:5e:ba:a3:d1:6c:f7:37:8f:12:c4:ca:
8c:76:b9:3f:75:d9:c9:2b:bd:a4:61:c1:be:4e:69:13:ef:53:
24:53:6f:a8:b2:ae:40:f7:d7:90:c6:d8:f0:ed:fa:c5:3b:96:
06:b6:f4:b6:af:85:ab:4d:d3:75:38:8b:1b:c1:6e:b2:24:9f:
df:6d:b5:ae:74:28:0b:5d:f5:c6:0f:ff:f9:70:a4:3e:00:8c:
4c:d7:8d:b5:c6:31:a0:56:51:23:93:a5:62:cb:3a:14:68:49:
8f:d9:04:15:59:83:2a:76:56:20:df:64:ce:e3:f3:f4:3a:fb:
a3:e8:1f:ed:a2:8d:1d:4c:05:35:f6:9f:ca:15:31:d6:ff:f8:
d3:9f:4f:ff:91:cd:6e:96:b8:b6:d8:04:83:4b:00:34:30:61:
d9:c0:cb:b8:51:35:44:2e:f9:4e:9e:8e:63:df:c9:07:f8:55:
c3:2b:6b:47:21:33:91:18:a1:82:48:f7:19:4b:ae:b8:05:e9:
92:b3:8a:d4:4b:0c:78:52:d5:74:dd:d0:63:1f:97:0d:ba:6f:
e7:bb:d7:0a:b5:22:d8:69:9a:26:c3:ab:85:9b:42:36:b2:b9:
e3:da:7f:a8
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICX1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMjEzMjE0OTE0WhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFEODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NC
RUJFNjhFRkNBMkM4RDFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKwxV4saJjwr0tuBR+zh1v/HR6zc9fSn25HWskrHDRS/b6PjSEw1KjwQqaap5zTL
kd4Y/1FKxwN1Wu+wdu6foPg+A10xP+EXqwM69T4xM2CX818khXc6SbQo7rfoZIh8
6nRQN04IH7Wt5f01rUZonow79XjfAW7DPGMP5XZJVSeZBN4hzAiBxqLupDZlPTLh
5PTtdKeRfyGQom6pRiJaQ0S+1MQhFX2XfvHlUmaAIFSer000sKan5jiKlTRHtgyQ
l+12WkHMnhNeHedxQQeMR1Mepkd8YYGVgbenYTqyaZHrlARxjRdJMgf6SdbF+KST
tACFNRDrxZMOGyUxGvk+QMMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT6IoAcUq4q
X8SRt8vr5o78osjR2TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDgzN0IvMTU4RDdGM0NCOTlDMTFFRjk2MzhGNzY5QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4MzdCLzE1OEQ3RjNDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1
S2xfRWtiZkw2LWFPX0tMSTBkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6pDANBgkqhkiG9w0BAQsFAAOCAQEAf8oX0b7Y/jXzH9Ixkzwb
Oq1+8ppqkSXT0l66o9Fs9zePEsTKjHa5P3XZySu9pGHBvk5pE+9TJFNvqLKuQPfX
kMbY8O36xTuWBrb0tq+Fq03TdTiLG8FusiSf3221rnQoC131xg//+XCkPgCMTNeN
tcYxoFZRI5OlYss6FGhJj9kEFVmDKnZWIN9kzuPz9Dr7o+gf7aKNHUwFNfafyhUx
1v/4059P/5HNbpa4ttgEg0sANDBh2cDLuFE1RC75Tp6OY9/JB/hVwytrRyEzkRih
gkj3GUuuuAXpkrOK1EsMeFLVdN3QYx+XDbpv57vXCrUi2GmaJsOrhZtCNrK549p/
qA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:50:20 2025 by rpki-client