Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer
File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer (raw, json)
Hash identifier: YQmaAaqrMq3crExHanezy/MmB5hrBjQ9XY05OeNuOE0=
Subject key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4ED9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 15:09:10 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 185.115.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20185 (0x4ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 21 15:09:10 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:94:af:ca:53:44:d5:f6:45:6f:49:b8:55:
01:ab:10:06:70:30:98:c5:a4:51:43:53:1a:59:1e:
8f:89:9b:18:dc:cb:c8:c1:e2:8f:8d:e6:84:b4:7b:
00:75:d5:03:d1:b3:2e:cb:c1:df:a1:65:5e:77:14:
14:19:fb:4f:e9:39:7e:7d:24:34:df:83:cc:f5:35:
6f:e6:65:44:e8:28:ec:a6:6c:d7:70:d5:21:97:5c:
18:7a:78:bd:5d:96:9b:18:ae:bc:ca:1c:ac:eb:e4:
bc:f5:9d:bf:9a:07:2d:64:72:cb:e2:a1:12:b4:94:
6c:56:d1:33:51:45:01:02:2c:7e:d8:04:72:73:f7:
7d:d0:62:ed:e0:d2:5b:ad:91:92:6d:67:72:27:2f:
5e:92:34:01:fc:b8:ae:83:10:d9:cc:e1:b3:7a:a5:
e5:1f:fa:c6:47:a6:44:ce:2f:92:46:e3:3a:5f:a9:
9b:1d:f1:4c:36:f4:6b:66:be:02:ff:52:2a:3e:bd:
93:91:19:1b:28:b5:72:48:05:b6:45:88:7e:64:e2:
99:b7:2b:8d:21:9e:9a:01:d0:67:71:72:7e:3b:17:
48:0e:1b:43:5a:f0:70:eb:fe:f2:a7:f5:55:fa:75:
fb:0e:ed:9a:b2:be:bd:64:98:c0:ce:ed:1a:c9:11:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.115.164.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ff:bd:51:0d:c3:64:e3:21:a7:ee:01:c2:76:b6:41:ab:eb:
2c:02:f6:41:13:12:eb:55:2f:69:6a:2c:d3:65:33:b7:ed:00:
b2:84:0e:d6:a5:dc:e2:e5:49:3c:ba:26:ee:e2:88:7a:2a:b2:
b6:57:5d:2d:22:2c:88:a9:18:82:cd:ce:3f:d5:e5:ac:d7:8e:
64:9c:51:ba:96:ba:f9:0f:52:b0:cb:86:8d:57:3b:59:b6:5c:
af:95:85:36:da:21:4c:44:c9:fe:5d:50:20:6f:f3:bd:14:24:
24:cb:c1:90:7d:01:5c:8e:bc:44:dd:46:3f:12:d6:9e:7d:5a:
a2:14:aa:ca:70:df:c6:b0:fb:0c:0b:5b:3c:11:f9:d1:fa:b1:
e0:9d:5e:10:4e:38:29:99:c3:87:50:b3:fb:e2:b9:2c:56:40:
96:50:b6:48:07:f8:ad:4f:e2:16:8e:ec:2f:42:f1:ca:48:86:
96:8e:d1:7c:0a:ef:dd:8d:9d:a3:4d:14:f6:be:11:9e:83:e5:
ab:ea:3a:61:e5:d4:0a:e8:89:ff:9b:f7:e0:fb:9c:fa:f0:a6:
66:1a:5f:47:2b:1b:ef:2e:73:c7:2b:08:66:e7:05:73:fc:cc:
89:ed:87:00:98:c1:e7:0b:b8:b3:9d:49:eb:20:d6:4b:37:99:
9e:72:dc:75
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICTtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMxMTIxMTUwOTEwWhcNMjUwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0QjQ2QTExMC8GA1UEBRMoMTIwNEZFMzE1QzAwOTBCMTVEOTEyNUI0
Mjk4NTVBMDZGNEQ0MjExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALBvlK/KU0TV9kVvSbhVAasQBnAwmMWkUUNTGlkej4mbGNzLyMHij43mhLR7AHXV
A9GzLsvB36FlXncUFBn7T+k5fn0kNN+DzPU1b+ZlROgo7KZs13DVIZdcGHp4vV2W
mxiuvMocrOvkvPWdv5oHLWRyy+KhErSUbFbRM1FFAQIsftgEcnP3fdBi7eDSW62R
km1ncicvXpI0Afy4roMQ2czhs3ql5R/6xkemRM4vkkbjOl+pmx3xTDb0a2a+Av9S
Kj69k5EZGyi1ckgFtkWIfmTimbcrjSGemgHQZ3FyfjsXSA4bQ1rwcOv+8qf1Vfp1
+w7tmrK+vWSYwM7tGskRSCUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQSBP4xXACQ
sV2RJbQphVoG9NQhHTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEI0NkEvMDBBNEQ1RjBFMDk5MTFFQjkyNzYwQjREQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRCNDZBLzAwQTRENUYwRTA5OTExRUI5Mjc2MEI0REM0RjlBRTAyL0VnVC1NVndB
a0xGZGtTVzBLWVZhQnZUVUlSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArlzpDANBgkqhkiG9w0BAQsFAAOCAQEAEf+9UQ3DZOMhp+4Bwna2
QavrLAL2QRMS61UvaWos02Uzt+0AsoQO1qXc4uVJPLom7uKIeiqytlddLSIsiKkY
gs3OP9XlrNeOZJxRupa6+Q9SsMuGjVc7WbZcr5WFNtohTETJ/l1QIG/zvRQkJMvB
kH0BXI68RN1GPxLWnn1aohSqynDfxrD7DAtbPBH50fqx4J1eEE44KZnDh1Cz++K5
LFZAllC2SAf4rU/iFo7sL0LxykiGlo7RfArv3Y2do00U9r4RnoPlq+o6YeXUCuiJ
/5v34Puc+vCmZhpfRysb7y5zxysIZucFc/zMie2HAJjB5wu4s51J6yDWSzeZnnLc
dQ==
-----END CERTIFICATE-----
Generated at Thu Apr 18 16:11:18 2024 by rpki-client on console-fra.rpki-client.org