Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (raw, json)
Hash identifier: R1nIH2aAZ9FtedURkH8OBD3wh9FO1khp77EMlr/oao4=
Subject key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4C18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Jul 2023 21:54:11 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 155.205.0.0/16
IP: 198.51.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 17:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19480 (0x4c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 17 21:54:11 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.0.0/16
198.51.211.0/24
Signature Algorithm: sha256WithRSAEncryption
07:18:6f:3d:f2:00:75:0a:90:ec:d3:df:be:de:c9:74:10:97:
c2:05:73:75:5e:d1:e5:4e:98:38:24:10:46:2f:13:b2:9a:79:
98:28:69:6a:c5:71:e6:33:d6:ec:93:f2:67:4b:fb:19:17:3b:
3f:13:09:a5:72:78:0a:1b:fb:a9:88:53:b2:ba:7e:ca:58:05:
e9:76:85:b7:10:ba:0d:63:fe:2d:74:21:8f:02:52:87:8b:dc:
dc:a8:75:04:c6:af:62:94:4b:24:74:05:92:70:ec:9f:f3:de:
09:a0:7f:53:e7:cb:42:3d:33:ad:f2:fd:db:76:16:6c:fe:38:
f1:16:95:98:60:ff:dc:77:dc:04:29:e1:4a:44:16:c7:ba:fa:
d7:a7:b1:c5:de:10:fc:29:46:5d:c4:30:80:3d:66:92:73:1f:
a7:48:4c:14:5d:bc:a7:8a:a6:23:f7:bb:82:03:59:08:2a:2e:
59:61:de:9f:64:85:d3:dc:58:a6:3b:71:a8:32:e3:1f:1e:11:
ab:84:09:bc:af:91:11:81:98:b8:14:c5:da:9c:65:7f:92:85:
a4:17:94:29:c2:1b:17:9e:d7:62:e7:5e:ca:1c:07:1c:23:26:
9a:8b:f7:4f:36:14:a1:f7:3f:5a:9e:5a:48:fd:77:ea:fe:27:
d4:f4:ff:74
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICTBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMwNzE3MjE1NDExWhcNMjQwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGODlDMTExMC8GA1UEBRMoRDhDMUNDOEE0NjNBMzE1MENCRUMwODY1
NEU2MTc4MDBENjZFNTNFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALq/EZAs5/NjVd/OxaQT3jYnPMijNYz28rK6TaCUqTF5ki5x9wFBvhUrCU+JuZDR
URAGdG+cgX5fhyrpE2HuEjRTcXasgjJsGVnFi98CovW1aIHzN7kUsasAUThh4cvI
VKUZs+nlHXiL4mYO1KXHG1uRbHKz3z5inXgHto1brk871Aqz2ncCi/LKUapJp8xb
kJARqi1RGpvsP9mK75znhM9OLnzC6FAtYp7OwcTUpl8KwQNL86ODCqczey5rlR98
8QuSqDcIAsbk3ZXEP+cdeDoTSJ4p9cU4H0xlS6wwLza/lbfvaVIiKeuwBS31GteO
yoCqzZI3Ew4KUxCGv5bfLCkCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBTYwcyKRjox
UMvsCGVOYXgA1m5T6TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5QzEvMEEzRjI2OUM4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4OUMxLzBBM0YyNjlDODA4NjExRUJCNEM2RDExNkM0RjlBRTAyLzJNSE1pa1k2
TVZETDdBaGxUbUY0QU5adVUtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw
EQQCAAEwCwMDAJvNAwQAxjPTMA0GCSqGSIb3DQEBCwUAA4IBAQAHGG898gB1CpDs
09++3sl0EJfCBXN1XtHlTpg4JBBGLxOymnmYKGlqxXHmM9bsk/JnS/sZFzs/Ewml
cngKG/upiFOyun7KWAXpdoW3ELoNY/4tdCGPAlKHi9zcqHUExq9ilEskdAWScOyf
894JoH9T58tCPTOt8v3bdhZs/jjxFpWYYP/cd9wEKeFKRBbHuvrXp7HF3hD8KUZd
xDCAPWaScx+nSEwUXbyniqYj97uCA1kIKi5ZYd6fZIXT3FimO3GoMuMfHhGrhAm8
r5ERgZi4FMXanGV/koWkF5QpwhsXntdi517KHAccIyaai/dPNhSh9z9anlpI/Xfq
/ifU9P90
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:07 2024 by rpki-client on console-fra.rpki-client.org