Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: 7APgvuP0L2Wrqz1PJOjQkA8udU6nQDFKX5LQST2Fios=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E6C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Nov 2023 00:35:49 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20076 (0x4e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 00:35:49 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
Signature Algorithm: sha256WithRSAEncryption
54:db:4f:b0:df:83:e0:d0:46:22:2f:38:79:76:4b:fe:9a:1f:
a6:18:31:f3:08:2d:88:2d:c4:91:d8:25:5a:a0:99:b6:1d:3f:
40:db:28:24:e9:80:3a:ca:5f:7b:de:98:8c:3c:7a:23:bb:ba:
c3:88:54:39:08:50:32:7d:bf:36:1d:be:ad:57:40:7b:b7:5c:
91:41:fe:34:81:dc:9c:df:f6:ff:b7:ae:6a:9c:66:1e:5f:20:
9b:a8:94:5e:09:7f:89:20:ec:ab:18:32:79:38:77:9d:c9:6e:
5b:3e:f2:92:b4:4e:58:36:a5:50:2a:c7:95:36:ee:69:91:0e:
a7:a7:6b:06:c6:4a:de:22:25:9e:02:14:a5:c7:99:d2:91:19:
74:f2:d5:7c:cf:60:0a:01:99:27:6c:2c:79:7c:af:9b:57:29:
7c:f7:f2:42:26:ca:88:ac:e3:04:bc:d9:a2:28:36:58:85:9b:
af:b7:98:1c:7b:0c:6f:90:97:d6:37:95:f0:4e:a7:b5:a5:55:
af:17:db:2c:98:0e:30:db:62:06:11:93:e5:e2:12:3c:df:fe:
bd:b8:59:42:b5:dd:31:37:7f:7a:38:f5:6f:f2:d4:2d:9e:1d:
8c:d2:6d:06:2c:1e:da:0d:43:fb:f8:33:43:66:de:d7:b2:ef:
ab:b4:70:61
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICTmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMxMTAxMDAzNTQ5WhcNMjQxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RTRCNzExMC8GA1UEBRMoRTM0QjRGODBEOUUzRjcwMEJDQUM0QzUy
QzVBQjIzRUI1QjdFREZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALsnEVUGsFEUq6l4KcM0S/5HDvGzA42nwq4kFLznX0/UGOZEInprTF+0D2o71GhB
rngtVbE35mERPUckNd+zwwNVGujWOva4rixeoDIFrs7ARo+1/OYLEoi5QlCgdKy0
Z0cbHyeHywDaVpP9s4fhTvjMg2QopcOnUwrMQvS9YcI7EGHIUhp2heqL2ArKTzdq
j0xiIawanwE/QoYlUC4EWL4/+Rw8Ma46D09pldh8XFoFA4I3D9WZa1oV68gacvke
4dgZUNf2RMx6jPbGWhzQLlMjQcpuAOFOPM3ABmnVKaZWK1s5hATKpa41WVa5mGwY
zrCkh56p9Rjf3LXLtPgwQr8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTjS0+A2eP3
ALysTFLFqyPrW37fuzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFNEI3Lzk2RTY2NzVBNzg0RTExRUVCMTlBRDM0REM0RjlBRTAyLzQwdFBnTm5q
OXdDOHJFeFN4YXNqNjF0LTM3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAi2CpAMEAi2XmDANBgkqhkiG9w0BAQsFAAOCAQEAVNtPsN+D4NBG
Ii84eXZL/pofphgx8wgtiC3EkdglWqCZth0/QNsoJOmAOspfe96YjDx6I7u6w4hU
OQhQMn2/Nh2+rVdAe7dckUH+NIHcnN/2/7euapxmHl8gm6iUXgl/iSDsqxgyeTh3
ncluWz7ykrROWDalUCrHlTbuaZEOp6drBsZK3iIlngIUpceZ0pEZdPLVfM9gCgGZ
J2wseXyvm1cpfPfyQibKiKzjBLzZoig2WIWbr7eYHHsMb5CX1jeV8E6ntaVVrxfb
LJgOMNtiBhGT5eISPN/+vbhZQrXdMTd/ejj1b/LULZ4djNJtBiwe2g1D+/gzQ2be
17Lvq7RwYQ==
-----END CERTIFICATE-----
Generated at Sat May 4 03:56:09 2024 by rpki-client on console-fra.rpki-client.org