Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.cer (raw, json)
Hash identifier: EJjEs1tFW8A0dAzDJk2LSHDjNOayEdZu8cjD2ASO/7s=
Subject key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BC5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 07:05:44 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.228.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23493 (0x5bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 4 07:05:44 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:33:b8:2d:3e:53:06:0a:6e:a7:49:fb:ed:
4c:63:bf:26:1f:c0:f4:7d:eb:ee:3f:dd:10:31:62:
e6:b8:d9:06:46:59:58:82:ac:66:4d:b2:fc:15:0a:
6b:f0:a6:c3:c1:c1:be:49:b0:82:13:f1:4a:60:3c:
f0:3b:72:2a:61:55:e2:96:0e:98:95:53:a1:58:08:
4e:bc:38:56:fb:72:59:fe:fa:5d:dc:2d:d0:b3:0e:
6f:b4:cf:09:ff:eb:ca:d1:91:ed:58:4f:bb:e5:e8:
2c:cf:19:0d:2f:cc:20:0a:a9:28:c0:18:d9:a7:e0:
fc:ea:53:d9:c7:e6:d1:e2:e7:e7:d3:9a:d4:52:96:
10:a7:e9:fc:4a:2c:5a:25:93:6e:22:b1:84:0f:e1:
32:92:cb:b8:9a:55:11:d4:00:61:3a:b0:f5:ea:74:
42:83:d4:cb:a5:f0:90:fe:bb:68:e3:81:d5:66:a6:
01:0e:7c:0a:fc:24:68:78:2f:29:4a:0e:b1:04:d2:
f5:e0:07:f9:db:fa:44:3b:61:63:50:d8:1f:94:11:
93:23:fe:2b:8e:0e:4b:7b:d4:f0:2d:91:b8:39:cc:
ae:29:33:0b:d5:57:9f:f5:76:1a:8d:0e:20:11:88:
57:d2:b7:54:e9:59:5a:2c:7e:02:30:ef:31:b6:7d:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.228.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1c:89:87:30:69:33:d7:e9:24:8a:b7:a0:cf:f9:45:04:c8:
fa:8b:d0:00:eb:e0:7e:4f:d3:b8:e5:97:1d:24:93:e5:04:4f:
95:e8:77:fe:77:e9:5f:f9:5f:3d:24:ba:97:7e:31:78:70:2c:
03:26:1f:ac:62:e6:9f:47:98:c4:1f:45:97:97:05:83:40:4d:
d4:f8:6f:ef:84:aa:36:79:fe:e5:f6:31:8b:bb:fa:3f:c2:4b:
26:87:77:2b:1f:7e:1a:7a:2b:c7:0d:b5:2a:42:a5:f3:43:d6:
9e:10:b1:80:f4:d2:42:fc:9d:07:e3:c5:13:4f:3a:9d:c6:6c:
ee:fe:06:01:1a:2d:51:da:44:28:99:33:4f:f5:20:a3:61:58:
11:02:45:fc:84:7e:e2:8e:18:95:96:1a:d6:6d:dc:18:5f:0b:
4b:6c:01:85:7d:ae:f4:31:d7:75:70:68:c4:2a:25:80:54:7e:
f7:0a:6d:cb:6a:f9:e6:3a:55:1c:46:bc:b0:5c:b3:42:0e:4b:
a7:7b:07:0c:bd:28:1e:02:e8:15:87:c5:50:e6:17:29:9f:db:
fb:19:98:2f:1a:ef:55:c1:2a:ac:4d:75:8a:1c:14:5c:3b:e4:
37:ef:67:62:cb:29:71:df:bd:1b:e4:9b:24:77:4a:53:48:5c:
42:99:47:ac
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICW8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMDA0MDcwNTQ0WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFRkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2
MUEyNTYzMjIzQ0E3ODE1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALfgM7gtPlMGCm6nSfvtTGO/Jh/A9H3r7j/dEDFi5rjZBkZZWIKsZk2y/BUKa/Cm
w8HBvkmwghPxSmA88DtyKmFV4pYOmJVToVgITrw4VvtyWf76Xdwt0LMOb7TPCf/r
ytGR7VhPu+XoLM8ZDS/MIAqpKMAY2afg/OpT2cfm0eLn59Oa1FKWEKfp/EosWiWT
biKxhA/hMpLLuJpVEdQAYTqw9ep0QoPUy6XwkP67aOOB1WamAQ58CvwkaHgvKUoO
sQTS9eAH+dv6RDthY1DYH5QRkyP+K44OS3vU8C2RuDnMrikzC9VXn/V2Go0OIBGI
V9K3VOlZWix+AjDvMbZ9b1UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTo1tQhKCuQ
GQAAl3YaJWMiPKeBXjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUZDRkYvMEZBODVGODg4MjFGMTFFRkExREI0Qzc1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVGQ0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dy
a0JrQUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKAe5DANBgkqhkiG9w0BAQsFAAOCAQEAkByJhzBpM9fpJIq3oM/5
RQTI+ovQAOvgfk/TuOWXHSST5QRPleh3/nfpX/lfPSS6l34xeHAsAyYfrGLmn0eY
xB9Fl5cFg0BN1Phv74SqNnn+5fYxi7v6P8JLJod3Kx9+Gnorxw21KkKl80PWnhCx
gPTSQvydB+PFE086ncZs7v4GARotUdpEKJkzT/Ugo2FYEQJF/IR+4o4YlZYa1m3c
GF8LS2wBhX2u9DHXdXBoxColgFR+9wpty2r55jpVHEa8sFyzQg5Lp3sHDL0oHgLo
FYfFUOYXKZ/b+xmYLxrvVcEqrE11ihwUXDvkN+9nYsspcd+9G+SbJHdKU0hcQplH
rA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org