Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer (raw, json)
Hash identifier: uhaeCf4vMJyDByND9mhEJLYOZ7U6NLaPggZNO0TTQB4=
Subject key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BF8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Oct 2024 01:46:28 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.216.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23544 (0x5bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 9 01:46:28 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:65:ca:60:48:8b:9f:d4:f6:79:8d:20:1a:
f1:ec:81:7b:98:ee:08:34:7a:a7:47:87:af:11:51:
48:23:dd:97:3d:27:0a:53:89:a7:49:03:a6:03:7c:
90:63:aa:ae:62:12:15:fe:08:4b:9b:31:e1:f8:0a:
25:2d:08:a8:d2:3f:f7:2f:19:31:19:4c:68:8d:4d:
cb:7c:57:89:e3:17:5b:e2:1c:98:f1:46:aa:47:45:
7f:b8:a0:7b:92:60:31:ae:c5:94:8a:3d:39:c1:bd:
28:50:aa:49:81:56:36:8c:cc:68:3d:ef:5b:26:68:
d2:7d:f9:86:8f:1d:87:65:2e:41:52:f3:da:5d:c2:
21:b1:4c:8e:0c:a0:ed:81:90:b7:44:63:0f:19:70:
c3:2a:a4:5d:ac:7b:38:ff:02:6c:d3:8f:3b:c2:f0:
df:d7:8c:ff:8f:e1:04:ef:3a:44:41:4b:05:76:7a:
b8:9e:e2:da:b5:14:4b:64:2f:97:8f:1a:b1:b5:fb:
50:02:0f:25:39:5e:13:3d:b9:7a:b3:4e:53:67:f6:
72:bd:15:46:ee:4d:ea:34:9e:6b:94:d8:63:2c:6e:
e1:be:e9:f8:4b:46:a0:56:75:70:d5:ac:f0:b2:77:
93:ae:45:4f:fd:55:ac:ac:4e:fc:ec:ce:c0:28:d4:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.216.0/23
Signature Algorithm: sha256WithRSAEncryption
41:45:ca:23:e6:6f:f5:7c:bb:f9:a4:95:97:fb:d8:ac:48:01:
1d:04:ed:b3:53:e2:1c:00:43:63:ca:68:cd:fd:6c:ac:23:c7:
7c:66:8b:13:7e:9f:eb:d0:6e:96:51:77:93:64:0b:77:6e:77:
ad:b6:c3:71:d6:0f:7a:28:10:00:9e:3e:41:70:53:41:da:68:
77:7b:ca:9d:43:13:a9:6b:dd:8c:55:e1:e3:58:ad:0b:a6:c3:
a9:de:55:26:2f:58:00:2c:7b:23:4f:1d:20:85:24:bf:64:fc:
87:ec:84:b9:7a:e8:40:90:c6:13:ce:ea:15:78:f3:12:43:19:
4a:3d:18:d4:bf:bf:d7:3c:ad:99:32:3b:bb:b3:07:fd:f8:53:
29:c8:8e:d5:63:f6:80:91:34:01:fd:83:11:4d:d3:09:d2:19:
5f:16:5f:0e:97:fc:37:ad:c4:90:20:97:9d:73:e0:a1:20:ed:
bc:47:5a:2a:d5:f1:e1:55:75:bc:0d:c3:27:e9:01:47:a6:df:
2e:db:67:c0:af:c9:be:9c:dc:c8:a0:23:9a:e7:3d:24:f0:fd:
a8:20:3d:f0:3a:ef:2d:84:70:35:f7:73:e0:5a:98:2d:70:2a:
05:fc:98:17:39:6d:6a:9e:42:5e:4e:bf:7a:87:5e:47:42:08:
cb:33:0e:61
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICW/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMDA5MDE0NjI4WhcNMjYwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDNjhBRDExMC8GA1UEBRMoRTlGMkNFNDgzRjFCMDZEMjlENUVBMkFC
RTM3NUJEMUQyMkE5RTFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMB6ZcpgSIuf1PZ5jSAa8eyBe5juCDR6p0eHrxFRSCPdlz0nClOJp0kDpgN8kGOq
rmISFf4IS5sx4fgKJS0IqNI/9y8ZMRlMaI1Ny3xXieMXW+IcmPFGqkdFf7ige5Jg
Ma7FlIo9OcG9KFCqSYFWNozMaD3vWyZo0n35ho8dh2UuQVLz2l3CIbFMjgyg7YGQ
t0RjDxlwwyqkXax7OP8CbNOPO8Lw39eM/4/hBO86REFLBXZ6uJ7i2rUUS2Qvl48a
sbX7UAIPJTleEz25erNOU2f2cr0VRu5N6jSea5TYYyxu4b7p+EtGoFZ1cNWs8LJ3
k65FT/1VrKxO/OzOwCjUAtkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTp8s5IPxsG
0p1eoqvjdb0dIqnhxDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY4QUQvNDlERUVFNjQ4NUUwMTFFRkE3NTg3NjU1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM2OEFELzQ5REVFRTY0ODVFMDExRUZBNzU4NzY1NUM0RjlBRTAyLzZmTE9TRDhi
QnRLZFhxS3I0M1c5SFNLcDRjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC72DANBgkqhkiG9w0BAQsFAAOCAQEAQUXKI+Zv9Xy7+aSVl/vY
rEgBHQTts1PiHABDY8pozf1srCPHfGaLE36f69BullF3k2QLd253rbbDcdYPeigQ
AJ4+QXBTQdpod3vKnUMTqWvdjFXh41itC6bDqd5VJi9YACx7I08dIIUkv2T8h+yE
uXroQJDGE87qFXjzEkMZSj0Y1L+/1zytmTI7u7MH/fhTKciO1WP2gJE0Af2DEU3T
CdIZXxZfDpf8N63EkCCXnXPgoSDtvEdaKtXx4VV1vA3DJ+kBR6bfLttnwK/Jvpzc
yKAjmuc9JPD9qCA98DrvLYRwNfdz4FqYLXAqBfyYFzltap5CXk6/eodeR0IIyzMO
YQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:54:59 2024 by rpki-client on console-ams.rpki-client.org