Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
File: F9X-Mj6_2ajTROd7c3majnViQ1I.cer (raw, json)
Hash identifier: TQ5rRaNQ9TFdW48CMLtjAkIK8l/JwOLhuKxWZ5uNbec=
Subject key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 52C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Feb 2024 00:41:43 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 166.120.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21184 (0x52c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 28 00:41:43 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:60:9e:99:1c:fa:8e:51:8e:34:1b:25:21:
3f:ad:e3:d7:73:8e:bb:b4:ec:31:57:ad:57:8f:6b:
6a:e2:d7:d6:f9:57:da:18:86:07:e5:54:2b:b8:ed:
04:d0:c0:b1:b7:d6:4d:a9:00:f2:a8:ed:74:25:04:
f2:89:60:97:2b:6e:8b:a8:20:1c:49:01:d8:bb:45:
20:89:61:f8:4b:78:ad:f7:a7:4d:8b:ba:28:12:75:
cd:82:26:e3:f7:8a:34:98:3b:97:9a:2e:39:3f:f6:
38:6a:45:e3:ec:03:9c:b0:86:86:9a:19:9e:4d:12:
f3:e9:e2:de:17:73:1f:52:e1:50:0d:b9:69:61:9d:
9d:37:a4:bb:e9:ca:0d:6e:64:9f:45:99:bc:8d:d7:
a1:e0:ee:80:c7:e4:e8:5f:14:3e:ab:60:0d:44:37:
c6:f1:10:f0:3e:8e:ed:9a:cf:c6:a8:5b:89:21:45:
7e:0b:e4:19:87:92:92:37:0a:d7:14:89:d2:ff:ae:
10:4b:94:b1:08:1f:f9:b6:9c:f9:e3:d9:6f:2a:36:
f9:e6:a8:d9:dd:f7:e4:39:0d:52:3b:88:9a:59:83:
69:35:12:a7:54:5c:a2:6b:3d:13:b9:29:3f:e2:ca:
b6:c9:3f:45:1c:a6:79:c3:a4:67:76:29:4f:ba:a5:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:09:86:3d:b7:4e:22:b4:67:80:c2:d3:8f:68:01:5d:67:40:
e8:6d:95:9f:4d:a9:c0:b0:3e:59:64:69:b7:c6:e3:5e:97:f1:
cb:46:33:e0:d9:c0:e5:d6:92:8f:50:13:9b:1d:9b:ac:48:65:
dd:58:8a:c1:ef:60:ee:b2:87:2d:81:3a:fc:2e:a0:21:23:f1:
8f:64:67:3e:a0:8b:00:9a:e4:42:4f:db:df:86:59:7c:79:5a:
30:de:8a:ba:55:ed:60:8e:e1:94:73:30:ac:c5:3c:06:92:7e:
e1:8a:cc:58:3c:b9:df:4e:6d:72:2d:cd:a9:2b:19:77:c8:62:
95:bf:43:5d:cd:8a:6c:88:bc:d6:86:89:7a:60:3f:28:e0:52:
1b:d5:1b:90:0a:41:2e:83:72:a5:f1:5a:80:fa:a0:27:09:4b:
f2:52:cb:f5:77:45:d4:77:52:e1:dd:27:76:87:ff:3e:c1:f0:
c4:58:c1:15:97:65:7d:99:b7:d9:ef:be:2b:c1:54:19:e1:46:
8b:e6:58:7e:eb:f7:10:45:ff:44:bf:ad:0a:94:92:d6:5d:3d:
82:d5:d5:20:cb:85:59:23:6e:99:0b:0e:98:90:b0:7d:68:25:
68:ef:b9:35:b1:bd:88:ab:f2:2f:55:6b:70:c4:e7:d9:b8:d7:
4e:9a:41:e5
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICUsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjI4MDA0MTQzWhcNMjUwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGMkI0NzExMC8GA1UEBRMoMTdENUZFMzIzRUJGRDlBOEQzNDRFNzdC
NzM3OTlBOEU3NTYyNDM1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL3+YJ6ZHPqOUY40GyUhP63j13OOu7TsMVetV49rauLX1vlX2hiGB+VUK7jtBNDA
sbfWTakA8qjtdCUE8olglytui6ggHEkB2LtFIIlh+Et4rfenTYu6KBJ1zYIm4/eK
NJg7l5ouOT/2OGpF4+wDnLCGhpoZnk0S8+ni3hdzH1LhUA25aWGdnTeku+nKDW5k
n0WZvI3XoeDugMfk6F8UPqtgDUQ3xvEQ8D6O7ZrPxqhbiSFFfgvkGYeSkjcK1xSJ
0v+uEEuUsQgf+bac+ePZbyo2+eao2d335DkNUjuImlmDaTUSp1Rcoms9E7kpP+LK
tsk/RRymecOkZ3YpT7qlMZ8CAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQX1f4yPr/Z
qNNE53tzeZqOdWJDUjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYyQjQ3L0U4OEU5QzdFMzNBRjExRURCNjEwNzQzNEM0RjlBRTAyL0Y5WC1NajZf
MmFqVFJPZDdjM21ham5WaVExSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAKZ4MA0GCSqGSIb3DQEBCwUAA4IBAQARCYY9t04itGeAwtOPaAFd
Z0DobZWfTanAsD5ZZGm3xuNel/HLRjPg2cDl1pKPUBObHZusSGXdWIrB72Dusoct
gTr8LqAhI/GPZGc+oIsAmuRCT9vfhll8eVow3oq6Ve1gjuGUczCsxTwGkn7hisxY
PLnfTm1yLc2pKxl3yGKVv0NdzYpsiLzWhol6YD8o4FIb1RuQCkEug3Kl8VqA+qAn
CUvyUsv1d0XUd1Lh3Sd2h/8+wfDEWMEVl2V9mbfZ774rwVQZ4UaL5lh+6/cQRf9E
v60KlJLWXT2C1dUgy4VZI26ZCw6YkLB9aCVo77k1sb2Iq/IvVWtwxOfZuNdOmkHl
-----END CERTIFICATE-----
Generated at Wed Apr 24 23:34:38 2024 by rpki-client on console-ams.rpki-client.org