Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
File: 09eD7kxpu1Bj-1z1smKLx77DdIo.cer (raw, json)
Hash identifier: LbS4hL4em5BjayAbRsYAmhDoo+Dw0zNdfWyK0pXQl1g=
Subject key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5B51
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Sep 2024 06:39:00 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.112.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23377 (0x5b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 24 06:39:00 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:b7:28:af:aa:62:3e:8f:da:76:77:d7:c0:
7f:5f:8f:53:fe:2e:26:05:a0:84:2c:39:a1:94:be:
f1:13:81:77:6c:d8:6e:9d:42:15:a1:ad:b7:82:e1:
d8:4d:bc:cc:85:cc:f8:a8:36:e0:94:b8:74:ab:34:
d6:1b:f2:24:79:44:72:d8:63:9a:20:ed:d1:5e:cc:
ee:61:03:a4:0d:47:9a:32:f6:11:d2:2d:2d:13:c8:
ef:14:b1:a8:3e:13:e4:3d:27:10:b2:02:fd:63:bd:
58:5d:f4:73:9f:7e:80:7f:ea:ae:c2:03:17:26:09:
58:1e:13:d8:8e:31:55:b5:df:a0:2d:16:6d:7c:83:
9e:97:0a:61:42:09:b9:ff:fa:01:ed:b2:28:81:94:
7d:4b:c7:f3:63:fa:43:95:3e:c4:4d:c4:6b:aa:59:
c2:a0:c7:f2:71:59:13:ff:2d:9f:f3:1a:72:60:b5:
4e:2c:e4:8a:56:53:ea:c0:da:c3:75:5e:e2:78:3e:
1b:0a:07:c5:b8:fe:35:6d:c4:a7:4b:cc:17:b0:1c:
9f:cf:54:d6:55:a8:63:c1:ad:14:9a:86:28:3e:cf:
31:f2:eb:d5:76:b2:3f:61:80:78:87:d7:38:9e:a5:
23:ad:79:3a:a9:47:51:76:59:4d:0a:28:87:c9:56:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a7:01:6c:c0:c5:9d:ab:4f:42:f7:bc:a5:d5:48:ee:9e:da:
07:85:c2:3a:ea:a3:b2:cf:da:f0:de:4d:99:cf:85:cd:c0:a8:
34:b5:e3:3b:5c:aa:42:25:58:85:10:4b:ad:a3:47:b4:aa:63:
ce:45:40:6f:6a:40:0e:c4:f6:c4:b3:f9:9c:1d:62:5a:3a:65:
2f:de:b0:fa:9e:b5:f8:80:ac:7f:c5:cf:a5:84:15:18:a4:5e:
02:48:91:0d:b4:27:59:3d:0f:05:ee:2c:71:35:5f:82:6d:5f:
d1:cb:37:1a:6f:f2:f4:cc:92:a9:09:1b:71:83:78:98:0a:0a:
7e:30:65:fb:80:1a:e2:4f:2f:0c:4a:04:b4:de:c7:1f:b5:6b:
8c:80:17:6d:6a:34:46:c3:1c:7b:e0:d9:9a:61:38:3d:d6:ef:
fb:68:37:8e:dc:5f:1e:33:92:7e:94:29:9c:09:00:36:cc:ae:
19:cc:0c:0e:38:99:ce:0f:b7:26:84:b2:c4:cd:0d:7e:eb:05:
d7:37:8d:3a:10:59:cf:31:52:e7:ab:6e:29:34:40:7b:af:04:
17:c9:37:61:c3:8d:ab:c7:7d:c8:fc:87:18:5e:bd:8e:f8:45:
e7:a0:93:f1:69:19:65:c8:8a:3e:08:8f:c6:5e:95:8d:48:b7:
05:87:5a:66
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICW1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwOTI0MDYzOTAwWhcNMjUwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCOUE3NzExMC8GA1UEBRMoRDNENzgzRUU0QzY5QkI1MDYzRkI1Q0Y1
QjI2MjhCQzdCRUMzNzQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM1ltyivqmI+j9p2d9fAf1+PU/4uJgWghCw5oZS+8ROBd2zYbp1CFaGtt4Lh2E28
zIXM+Kg24JS4dKs01hvyJHlEcthjmiDt0V7M7mEDpA1HmjL2EdItLRPI7xSxqD4T
5D0nELIC/WO9WF30c59+gH/qrsIDFyYJWB4T2I4xVbXfoC0WbXyDnpcKYUIJuf/6
Ae2yKIGUfUvH82P6Q5U+xE3Ea6pZwqDH8nFZE/8tn/MacmC1TizkilZT6sDaw3Ve
4ng+GwoHxbj+NW3Ep0vMF7Acn89U1lWoY8GtFJqGKD7PMfLr1XayP2GAeIfXOJ6l
I615OqlHUXZZTQooh8lWdkcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTT14PuTGm7
UGP7XPWyYovHvsN0ijAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjlBNzcvQUI4NTM0NDA3QTNGMTFFRkExQzBFMDE2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5QTc3L0FCODUzNDQwN0EzRjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hw
dTFCai0xejFzbUtMeDc3RGRJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC7cDANBgkqhkiG9w0BAQsFAAOCAQEAoqcBbMDFnatPQve8pdVI
7p7aB4XCOuqjss/a8N5Nmc+FzcCoNLXjO1yqQiVYhRBLraNHtKpjzkVAb2pADsT2
xLP5nB1iWjplL96w+p61+ICsf8XPpYQVGKReAkiRDbQnWT0PBe4scTVfgm1f0cs3
Gm/y9MySqQkbcYN4mAoKfjBl+4Aa4k8vDEoEtN7HH7VrjIAXbWo0RsMce+DZmmE4
Pdbv+2g3jtxfHjOSfpQpnAkANsyuGcwMDjiZzg+3JoSyxM0NfusF1zeNOhBZzzFS
56tuKTRAe68EF8k3YcONq8d9yPyHGF69jvhF56CT8WkZZciKPgiPxl6VjUi3BYda
Zg==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:54:59 2024 by rpki-client on console-ams.rpki-client.org