Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
File: Klm5bDClX71h0iMDc864nR2wGos.cer (raw, json)
Hash identifier: L/YRsVWZmIEGZY2RevBMMOmliRMNLNN5OYZdHIf3tis=
Subject key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5EB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 02:15:37 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.187.133.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jan 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24241 (0x5eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 2 02:15:37 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:6a:34:08:2e:7c:94:75:4a:53:6c:aa:09:
46:d6:f8:9d:cf:08:54:d0:e6:1f:10:05:b1:9e:91:
6f:29:d1:dc:58:2d:b3:7d:2d:bc:c8:85:0e:ae:f8:
c6:dd:7c:fc:85:ad:e3:86:af:c4:31:09:ee:b6:26:
5a:5c:74:f1:26:f3:0c:af:cf:9d:42:1d:e5:58:d5:
3a:57:95:59:9c:85:ef:30:60:56:07:4b:7d:dc:ac:
d1:80:47:eb:ba:42:33:e6:49:4d:06:dc:34:ae:b3:
66:98:f3:4d:a8:ef:3c:13:8d:a8:d0:24:fd:a6:94:
a1:cb:c2:03:45:b5:7b:a9:62:11:8e:bb:d1:da:91:
33:79:8e:8c:e9:7c:a1:9a:5e:a9:da:4c:f5:19:4d:
4a:a7:78:41:ea:3e:99:60:26:a5:f7:c6:c0:4e:16:
00:6f:ec:05:a2:1d:44:6c:d7:f1:70:d8:f6:d0:df:
44:aa:65:ca:27:eb:58:52:c5:63:13:75:81:95:3b:
5d:44:00:0d:d9:6a:f9:65:86:8a:08:6f:3a:14:b3:
13:c0:3e:ce:98:a4:8a:b7:c8:ce:e3:7b:63:71:2b:
9d:ba:8c:87:9c:1f:08:66:cc:5c:ba:0e:3a:b2:e2:
72:4f:ce:f7:85:c9:80:74:1d:d7:1a:58:b4:a8:f5:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:25:d9:6a:c3:f7:03:45:ba:37:77:4e:74:dd:96:1a:41:13:
71:34:c5:af:53:55:7f:5e:0e:ef:2f:dd:d4:5d:38:f7:b1:68:
c7:8e:0b:76:70:69:f0:f2:de:ce:4e:94:a6:e3:aa:8e:46:84:
b8:81:e2:05:09:33:23:23:d2:aa:49:e4:90:1e:dc:c8:a3:b4:
2c:75:74:c7:70:04:49:ab:11:1c:d9:ae:38:b2:7e:f7:46:b9:
1d:ed:e1:84:24:54:fc:e2:ab:11:e5:6d:eb:ec:f6:0e:81:7a:
3d:9c:c5:2a:e2:8d:0f:5d:65:d2:ff:73:b6:63:2f:41:8f:f3:
13:ff:15:27:e9:c9:d6:47:b6:ba:c9:34:95:42:d7:dd:3b:c1:
f4:9b:a7:f7:f6:ac:f0:42:47:1f:8f:d2:11:16:20:9f:90:dd:
1f:f8:b1:1f:78:23:9d:1f:66:b6:a5:71:a9:4b:89:39:da:19:
bd:ee:b3:44:39:50:15:34:e0:67:64:db:25:ad:d6:ed:79:3d:
ab:d7:03:09:90:2e:6c:8f:f8:48:9a:a2:ae:68:19:88:da:5e:
32:a6:df:77:60:80:c5:d3:03:96:ff:0d:75:9d:be:74:36:fa:
24:63:54:a9:76:1c:f9:f3:ee:6b:51:e9:34:dc:72:d0:4a:b3:
dc:4e:fb:ad
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMjAyMDIxNTM3WhcNMjUxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGNTIzRjExMC8GA1UEBRMoMkE1OUI5NkMzMEE1NUZCRDYxRDIyMzAz
NzNDRUI4OUQxREIwMUE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKJEajQILnyUdUpTbKoJRtb4nc8IVNDmHxAFsZ6RbynR3Fgts30tvMiFDq74xt18
/IWt44avxDEJ7rYmWlx08SbzDK/PnUId5VjVOleVWZyF7zBgVgdLfdys0YBH67pC
M+ZJTQbcNK6zZpjzTajvPBONqNAk/aaUocvCA0W1e6liEY670dqRM3mOjOl8oZpe
qdpM9RlNSqd4Qeo+mWAmpffGwE4WAG/sBaIdRGzX8XDY9tDfRKplyifrWFLFYxN1
gZU7XUQADdlq+WWGighvOhSzE8A+zpikirfIzuN7Y3ErnbqMh5wfCGbMXLoOOrLi
ck/O94XJgHQd1xpYtKj15M8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQqWblsMKVf
vWHSIwNzzridHbAaizAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjUyM0YvNEVCQTZCMzJCMDUzMTFFRjlDMkI4RDNGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY1MjNGLzRFQkE2QjMyQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL0tsbTViRENs
WDcxaDBpTURjODY0blIyd0dvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC7hTANBgkqhkiG9w0BAQsFAAOCAQEAWiXZasP3A0W6N3dOdN2W
GkETcTTFr1NVf14O7y/d1F0497Fox44LdnBp8PLezk6UpuOqjkaEuIHiBQkzIyPS
qknkkB7cyKO0LHV0x3AESasRHNmuOLJ+90a5He3hhCRU/OKrEeVt6+z2DoF6PZzF
KuKND11l0v9ztmMvQY/zE/8VJ+nJ1ke2usk0lULX3TvB9Jun9/as8EJHH4/SERYg
n5DdH/ixH3gjnR9mtqVxqUuJOdoZve6zRDlQFTTgZ2TbJa3W7Xk9q9cDCZAubI/4
SJqirmgZiNpeMqbfd2CAxdMDlv8NdZ2+dDb6JGNUqXYc+fPua1HpNNxy0Eqz3E77
rQ==
-----END CERTIFICATE-----
Generated at Sun Dec 29 15:42:08 2024 by rpki-client on console-fra.rpki-client.org