Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
File: C5sr_BxrLAlndq91fTrxRUfkPnI.cer (raw, json)
Hash identifier: 1xPBlwDxf3dHZcLW/CGHRfjwdQzgdEZ1bMzTURpoVQ4=
Subject key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5486
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Apr 2024 17:10:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 167.179.48.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21638 (0x5486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 12 17:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:10:02:06:84:01:11:f5:99:df:35:e8:29:
67:27:24:f3:a6:07:2b:30:65:d2:41:ba:76:10:9a:
8e:25:c6:24:b1:39:06:4f:17:1c:8e:90:3f:a8:fe:
39:9d:52:35:ad:ca:78:d3:bc:91:9a:60:d3:c9:29:
74:51:7b:d1:80:20:0c:b1:99:76:ce:41:52:1b:a9:
40:10:a0:f1:5c:30:c1:8b:39:5c:ec:e8:7e:79:4d:
34:7d:d2:67:1a:df:3b:3e:9f:25:94:eb:39:93:15:
b0:1c:77:3d:b1:a2:b8:0f:88:b6:2e:5f:bc:88:2f:
2c:67:59:77:43:d9:a2:75:b9:c4:a1:5d:53:5e:6c:
7a:72:20:a2:9f:91:99:54:bd:2a:85:07:88:a3:53:
35:d4:0c:a8:af:7e:c9:b2:51:46:f5:1e:43:08:47:
28:71:e0:05:b3:76:af:9a:1d:c2:6c:77:7e:d1:7e:
da:b4:1b:63:bc:41:74:2c:05:47:b1:03:ec:a0:57:
d4:2f:4a:a6:7b:2b:78:0e:32:4d:1e:eb:5c:68:44:
aa:6a:90:ff:8e:76:4f:3f:9f:52:af:8f:42:99:b6:
b3:22:fb:a4:c1:2a:57:10:ba:c6:92:19:0b:97:27:
85:33:2f:9e:e7:2a:6f:80:7e:50:f8:0d:5d:23:14:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.48.0/20
Signature Algorithm: sha256WithRSAEncryption
13:a3:6e:90:a0:a3:b0:86:49:32:1b:51:f3:a4:42:9e:70:ee:
e5:33:8c:49:b1:70:70:f9:71:ad:01:18:5a:ea:02:b5:59:31:
68:32:85:d5:40:6f:58:52:92:77:52:64:1d:d5:51:32:8d:59:
9c:bc:58:ff:a8:40:21:70:85:11:6a:10:8f:f7:38:87:77:b8:
78:fc:a2:a3:cb:33:65:bb:eb:c0:07:23:bc:4f:6c:21:2c:c6:
cf:43:73:00:46:de:e5:49:de:75:78:d1:e5:08:6d:38:1d:85:
9a:b2:6d:19:19:6c:e3:7e:5a:62:2b:ef:84:cc:1d:c3:fb:42:
17:a8:b1:b8:e5:d1:90:57:a1:ad:98:13:da:32:35:e5:65:48:
5c:c2:65:eb:38:dc:8a:d7:11:19:42:98:48:64:ec:2d:6f:da:
2c:e8:bb:a0:5a:f9:60:20:86:28:b6:ac:5b:53:0a:40:94:fb:
f2:10:3e:a7:51:14:74:85:3a:77:f9:88:32:c2:f3:8b:19:14:
d5:b7:5a:5a:0a:be:80:49:4d:bd:a4:9b:ab:6a:71:5f:02:59:
1b:77:87:e2:66:8e:ca:fc:be:0a:4c:53:b4:5d:80:90:9f:df:
5d:0e:a4:f3:28:bd:44:57:5f:1e:38:6c:cd:99:29:7f:83:37:
7e:4e:06:2e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICVIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNDEyMTcxMDExWhcNMjUwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RjY0NjExMC8GA1UEBRMoMEI5QjJCRkMxQzZCMkMwOTY3NzZBRjc1
N0QzQUYxNDU0N0U0M0U3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AK56EAIGhAER9ZnfNegpZyck86YHKzBl0kG6dhCajiXGJLE5Bk8XHI6QP6j+OZ1S
Na3KeNO8kZpg08kpdFF70YAgDLGZds5BUhupQBCg8VwwwYs5XOzofnlNNH3SZxrf
Oz6fJZTrOZMVsBx3PbGiuA+Iti5fvIgvLGdZd0PZonW5xKFdU15senIgop+RmVS9
KoUHiKNTNdQMqK9+ybJRRvUeQwhHKHHgBbN2r5odwmx3ftF+2rQbY7xBdCwFR7ED
7KBX1C9KpnsreA4yTR7rXGhEqmqQ/452Tz+fUq+PQpm2syL7pMEqVxC6xpIZC5cn
hTMvnucqb4B+UPgNXSMU9h0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQLmyv8HGss
CWd2r3V9OvFFR+Q+cjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEY2NDYvQ0VDRThDOUFGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThGNjQ2L0NFQ0U4QzlBRjQ4RTExRThCMTRBMzQxRUM0RjlBRTAyL0M1c3JfQnhy
TEFsbmRxOTFmVHJ4UlVma1BuSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBKezMDANBgkqhkiG9w0BAQsFAAOCAQEAE6NukKCjsIZJMhtR86RC
nnDu5TOMSbFwcPlxrQEYWuoCtVkxaDKF1UBvWFKSd1JkHdVRMo1ZnLxY/6hAIXCF
EWoQj/c4h3e4ePyio8szZbvrwAcjvE9sISzGz0NzAEbe5UnedXjR5QhtOB2FmrJt
GRls435aYivvhMwdw/tCF6ixuOXRkFehrZgT2jI15WVIXMJl6zjcitcRGUKYSGTs
LW/aLOi7oFr5YCCGKLasW1MKQJT78hA+p1EUdIU6d/mIMsLzixkU1bdaWgq+gElN
vaSbq2pxXwJZG3eH4maOyvy+CkxTtF2AkJ/fXQ6k8yi9RFdfHjhszZkpf4M3fk4G
Lg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:38 2024 by rpki-client on console-ams.rpki-client.org