Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer (raw, json)
Hash identifier: Qa8aYuS4I4cMyiJXexagC3Ydy8cME64GkiWyfMtfTMM=
Subject key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5DE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 09:14:04 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24034 (0x5de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 14 09:14:04 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:12:3a:0e:fb:1a:09:bf:f6:b2:84:d8:ff:
05:50:3b:69:63:ed:0d:7c:b3:9c:d0:0e:70:f5:ab:
5a:54:85:52:3c:05:5d:a9:84:4a:78:37:4e:4a:b5:
13:f7:e7:0b:94:34:64:fd:4b:9d:3d:a3:f0:e7:a7:
77:eb:81:7a:48:49:c1:70:ca:1d:81:0e:d8:09:1d:
ff:c1:ff:55:69:1b:d5:79:be:f4:6d:62:72:73:00:
22:10:d8:a0:a7:b9:1f:88:40:8c:e8:cc:dd:25:b5:
6f:99:9c:e5:02:58:d2:89:b7:72:59:ad:95:ef:5f:
bf:f0:48:31:3a:f4:ff:73:ef:3b:f8:5a:21:b3:13:
ae:0a:8e:32:e8:56:8b:d7:b9:f5:ca:82:d4:45:97:
2c:b1:ae:35:a6:e6:71:45:cb:48:79:8a:af:66:68:
72:ed:f9:8d:5b:40:6a:f5:04:39:ec:de:0b:88:85:
fd:40:0c:85:5e:7b:24:d4:7c:40:43:cf:4e:33:f2:
f2:ab:56:a2:29:ee:95:47:00:32:e4:32:41:47:4d:
bb:00:d9:15:84:fd:94:de:17:33:42:41:cb:d3:7f:
60:47:ed:c3:bc:94:8c:ec:54:eb:ed:ad:b6:79:ae:
ca:73:49:f5:e7:a3:79:78:94:76:0f:3f:56:fb:0e:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.180.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:8a:3e:eb:b3:90:c7:37:91:e7:95:70:04:5d:62:d6:e8:a6:
c6:ad:1e:40:ae:10:aa:9d:01:64:28:89:44:1c:c9:0b:b2:fe:
58:21:5c:01:4c:c5:49:b8:5f:9e:70:8b:cf:16:55:fd:34:4f:
18:37:2c:85:a1:ac:eb:cd:53:28:66:4f:65:90:85:e4:b2:8b:
88:97:40:ae:06:33:83:3b:62:ad:93:80:34:0d:57:44:81:11:
54:48:b8:6e:c0:d0:f3:c8:69:f1:c6:6a:99:a1:c4:2b:8b:8d:
23:11:2e:c3:23:72:c5:d3:43:70:00:ac:92:e1:0a:e4:5c:cf:
18:66:ec:7e:7f:f1:5f:90:88:a2:6a:fe:98:f7:47:0c:f7:67:
bf:b1:50:83:06:31:19:4e:f0:72:e7:f3:82:c5:34:9b:c8:7f:
e6:2b:2d:ef:e0:34:a4:93:11:3a:c5:79:0b:0d:ee:a6:eb:91:
55:5f:6e:94:98:f3:25:c8:ce:58:e7:ad:04:68:57:0d:2b:dc:
b4:17:bd:f2:b7:e6:7b:3c:a0:50:68:a4:97:7e:0e:ad:e0:1d:
72:ce:59:08:88:d2:97:0e:a1:bc:2c:6d:13:49:f7:e5:b6:77:
88:48:f4:85:34:80:c3:26:d4:2c:fd:57:79:a2:e9:d8:e7:92:
c9:3d:4d:c8
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMTE0MDkxNDA0WhcNMjUxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1MjMyOTExMC8GA1UEBRMoMjkzQUM2NDA1MzA5REU5NDk1MTY4N0ZF
MTcyOTZBRERDRDk1NzJGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOSGEjoO+xoJv/ayhNj/BVA7aWPtDXyznNAOcPWrWlSFUjwFXamESng3Tkq1E/fn
C5Q0ZP1LnT2j8Oend+uBekhJwXDKHYEO2Akd/8H/VWkb1Xm+9G1icnMAIhDYoKe5
H4hAjOjM3SW1b5mc5QJY0om3clmtle9fv/BIMTr0/3PvO/haIbMTrgqOMuhWi9e5
9cqC1EWXLLGuNabmcUXLSHmKr2Zocu35jVtAavUEOezeC4iF/UAMhV57JNR8QEPP
TjPy8qtWoinulUcAMuQyQUdNuwDZFYT9lN4XM0JBy9N/YEftw7yUjOxU6+2ttnmu
ynNJ9eejeXiUdg8/VvsOrWECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQpOsZAUwne
lJUWh/4XKWrdzZVy/DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIzMjkvQzdGQUQzNjhBMjY4MTFFRjlEOTE0MTE4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUyMzI5L0M3RkFEMzY4QTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL0tUckdRRk1K
M3BTVkZvZi1GeWxxM2MyVmN2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC7tDANBgkqhkiG9w0BAQsFAAOCAQEAu4o+67OQxzeR55VwBF1i
1uimxq0eQK4Qqp0BZCiJRBzJC7L+WCFcAUzFSbhfnnCLzxZV/TRPGDcshaGs681T
KGZPZZCF5LKLiJdArgYzgztirZOANA1XRIERVEi4bsDQ88hp8cZqmaHEK4uNIxEu
wyNyxdNDcACskuEK5FzPGGbsfn/xX5CIomr+mPdHDPdnv7FQgwYxGU7wcufzgsU0
m8h/5ist7+A0pJMROsV5Cw3upuuRVV9ulJjzJcjOWOetBGhXDSvctBe98rfmezyg
UGikl34OreAdcs5ZCIjSlw6hvCxtE0n35bZ3iEj0hTSAwybULP1XeaLp2OeSyT1N
yA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:39 2024 by rpki-client on console-ams.rpki-client.org