Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.cer (raw, json)
Hash identifier: gMFVDutZfpnGZ8jJIjgFVW2Oiq1ey+4vRmLF6/zH6uE=
Subject key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5EC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Dec 2024 03:40:09 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.142.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24265 (0x5ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 3 03:40:09 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9145B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:3e:2d:9c:6f:b2:b7:de:10:3a:42:a3:56:
68:ed:e7:ab:b3:23:40:03:6f:36:94:cd:7e:73:82:
4b:72:c2:b2:80:80:5d:61:f8:8e:10:8f:38:c8:b4:
ae:e0:f8:00:64:94:78:92:7e:e8:54:6e:70:37:60:
d6:19:10:99:50:d9:5b:60:2d:d6:3c:c2:5c:3c:91:
8a:3c:30:ea:99:a9:a9:05:0e:32:96:39:04:4f:84:
25:9c:20:94:25:60:60:1f:17:6c:fd:ea:88:44:f1:
c5:38:0f:e3:86:fc:26:c6:f7:b5:bc:ba:9e:f3:9b:
c4:3a:19:b8:cf:39:7c:f6:cb:26:93:d3:8c:bb:29:
bf:84:76:77:8c:0f:e4:2c:37:d3:1b:b8:9c:ae:c2:
4f:9e:ed:22:14:e6:2e:a3:ba:ff:7e:ca:49:e7:47:
62:d7:bf:a1:fc:40:f2:e7:d5:8e:a5:d0:27:eb:5e:
bb:7e:81:28:20:45:c8:1c:0c:51:0c:d3:31:99:bc:
6d:e0:50:fd:56:7e:1c:bb:07:33:c5:38:09:2b:64:
56:86:8d:43:ce:1d:04:99:61:ab:8d:10:57:5c:c9:
4d:7f:48:49:4d:6e:f9:bc:16:ff:65:1f:1c:e8:c8:
ac:c4:7f:08:79:1c:64:9f:30:13:a2:75:53:c4:83:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.142.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:04:55:0e:b3:e2:09:79:90:ca:3b:68:ef:a0:8b:c2:53:fc:
d4:9f:25:d2:58:92:db:86:0e:52:a1:b0:b0:28:4f:56:1b:1c:
14:33:b1:bf:fd:72:6f:ef:44:58:21:a1:10:b5:c0:6a:42:85:
55:3c:3e:6d:27:e8:be:b5:d5:65:c6:23:2b:68:5c:d5:a0:e2:
58:a3:85:32:9d:f1:42:39:2a:36:75:1c:5e:6a:8f:c5:8a:39:
35:6a:e0:c6:d0:ee:7d:75:57:12:58:fb:34:eb:63:ac:c7:ce:
91:ba:26:b3:14:cd:e3:30:44:fa:47:e5:dd:f0:02:66:bf:07:
52:9a:5d:99:2b:47:1c:2d:8e:be:4c:d0:ae:6c:52:4b:a3:07:
dd:2f:a2:20:9e:ec:17:6d:8c:a3:1b:aa:ec:3f:7e:e0:72:27:
12:12:22:48:b9:46:a2:57:72:8b:b0:49:f0:e0:20:4f:2a:b1:
dc:34:d1:af:f3:5c:2e:77:e1:af:6d:0b:b8:87:68:51:69:c4:
6b:ee:20:66:ed:e9:4b:af:29:c9:66:ac:c9:54:8b:9f:b4:af:
69:51:6e:a8:b2:5f:79:de:99:21:6f:93:91:33:ec:a1:93:bc:
c6:f6:04:e1:49:49:c1:6d:6f:dd:8a:99:0c:2a:9b:b9:77:1a:
25:7e:e5:e4
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMjAzMDM0MDA5WhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0
NEY0NEI1NTNBNERCM0RDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANwyPi2cb7K33hA6QqNWaO3nq7MjQANvNpTNfnOCS3LCsoCAXWH4jhCPOMi0ruD4
AGSUeJJ+6FRucDdg1hkQmVDZW2At1jzCXDyRijww6pmpqQUOMpY5BE+EJZwglCVg
YB8XbP3qiETxxTgP44b8Jsb3tby6nvObxDoZuM85fPbLJpPTjLspv4R2d4wP5Cw3
0xu4nK7CT57tIhTmLqO6/37KSedHYte/ofxA8ufVjqXQJ+teu36BKCBFyBwMUQzT
MZm8beBQ/VZ+HLsHM8U4CStkVoaNQ84dBJlhq40QV1zJTX9ISU1u+bwW/2UfHOjI
rMR/CHkcZJ8wE6J1U8SDVsMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTj8W+dc8zu
JpORWiRPRLVTpNs9zDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDVCMTMvNDYzN0ZCRjJCMTI4MTFFRkI3NTBBNTJCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBN
N2lhVGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6jjANBgkqhkiG9w0BAQsFAAOCAQEAtwRVDrPiCXmQyjto76CL
wlP81J8l0liS24YOUqGwsChPVhscFDOxv/1yb+9EWCGhELXAakKFVTw+bSfovrXV
ZcYjK2hc1aDiWKOFMp3xQjkqNnUcXmqPxYo5NWrgxtDufXVXElj7NOtjrMfOkbom
sxTN4zBE+kfl3fACZr8HUppdmStHHC2OvkzQrmxSS6MH3S+iIJ7sF22Moxuq7D9+
4HInEhIiSLlGoldyi7BJ8OAgTyqx3DTRr/NcLnfhr20LuIdoUWnEa+4gZu3pS68p
yWasyVSLn7SvaVFuqLJfed6ZIW+TkTPsoZO8xvYE4UlJwW1v3YqZDCqbuXcaJX7l
5A==
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:01:53 2025 by rpki-client