Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: HmtcSZGugI84du71SLBDEjdoMcFCzqrp5aCyye/vXRQ=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A5E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Sep 2024 17:23:17 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23134 (0x5a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 1 17:23:17 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
Signature Algorithm: sha256WithRSAEncryption
15:3b:39:df:ab:ce:7d:3c:b8:80:07:8d:51:41:a7:0c:92:45:
d5:f4:73:dc:78:f2:03:75:5d:c7:af:26:89:85:59:79:6c:bd:
6a:f1:0c:9a:38:cf:28:e0:17:7d:60:d3:0e:5a:5b:9f:1e:a5:
a8:4b:0b:10:b3:cf:a9:fd:0a:a5:2a:c2:36:17:5a:07:b3:38:
6c:46:54:42:1e:6f:ed:7e:1e:da:9f:aa:61:8a:03:b4:31:46:
6c:fb:84:73:ea:b2:6a:1f:69:e9:e1:c2:69:5f:7d:70:96:d3:
86:09:39:da:a6:1e:b2:fd:7a:dc:12:83:57:f8:64:7e:14:8a:
d9:27:7f:cd:83:05:3f:bb:4a:58:55:df:68:48:f2:d0:7e:fe:
92:96:33:e4:51:4a:3e:52:fe:4f:02:5f:7e:3e:41:e1:c0:d8:
d2:ab:bb:24:c7:04:0b:b2:e3:35:a8:92:3b:a8:c0:37:39:20:
fd:38:3a:cb:42:ae:e3:63:ca:ce:4d:7e:5f:18:ac:58:1a:cc:
c8:2a:35:e6:a6:a4:85:14:a3:34:76:23:87:8c:c2:96:6a:82:
4c:82:92:28:71:df:fd:d1:4d:dc:b5:a0:2d:d2:a2:99:a6:9e:
be:cd:30:21:5d:d7:6d:e7:4a:54:97:6f:d9:54:e8:4e:5a:af:
90:2a:19:6c
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICWl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwOTAxMTcyMzE3WhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RTRCNzExMC8GA1UEBRMoRTM0QjRGODBEOUUzRjcwMEJDQUM0QzUy
QzVBQjIzRUI1QjdFREZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALsnEVUGsFEUq6l4KcM0S/5HDvGzA42nwq4kFLznX0/UGOZEInprTF+0D2o71GhB
rngtVbE35mERPUckNd+zwwNVGujWOva4rixeoDIFrs7ARo+1/OYLEoi5QlCgdKy0
Z0cbHyeHywDaVpP9s4fhTvjMg2QopcOnUwrMQvS9YcI7EGHIUhp2heqL2ArKTzdq
j0xiIawanwE/QoYlUC4EWL4/+Rw8Ma46D09pldh8XFoFA4I3D9WZa1oV68gacvke
4dgZUNf2RMx6jPbGWhzQLlMjQcpuAOFOPM3ABmnVKaZWK1s5hATKpa41WVa5mGwY
zrCkh56p9Rjf3LXLtPgwQr8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTjS0+A2eP3
ALysTFLFqyPrW37fuzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFNEI3Lzk2RTY2NzVBNzg0RTExRUVCMTlBRDM0REM0RjlBRTAyLzQwdFBnTm5q
OXdDOHJFeFN4YXNqNjF0LTM3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAi2CpAMEAi2XmDANBgkqhkiG9w0BAQsFAAOCAQEAFTs536vOfTy4
gAeNUUGnDJJF1fRz3HjyA3Vdx68miYVZeWy9avEMmjjPKOAXfWDTDlpbnx6lqEsL
ELPPqf0KpSrCNhdaB7M4bEZUQh5v7X4e2p+qYYoDtDFGbPuEc+qyah9p6eHCaV99
cJbThgk52qYesv163BKDV/hkfhSK2Sd/zYMFP7tKWFXfaEjy0H7+kpYz5FFKPlL+
TwJffj5B4cDY0qu7JMcEC7LjNaiSO6jANzkg/Tg6y0Ku42PKzk1+XxisWBrMyCo1
5qakhRSjNHYjh4zClmqCTIKSKHHf/dFN3LWgLdKimaaevs0wIV3XbedKVJdv2VTo
TlqvkCoZbA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org