Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
File: MtNTdDyP4vCOl7IuW2CavBTM_js.cer (raw, json)
Hash identifier: Hdj/yfbxl6pZVeJ/6YSJ5HXHZIA053QzKa7noPv/vQQ=
Subject key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A04
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 24 Aug 2024 19:03:00 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23044 (0x5a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 24 19:03:00 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:88:6b:b6:02:b5:4c:bd:18:39:93:f9:4a:
19:dc:8e:b6:5a:62:54:f4:a5:97:c9:78:7c:61:c7:
35:9f:fb:1a:5b:35:66:b2:e8:55:2b:4c:3b:31:a8:
7f:9f:6f:e0:7c:de:02:38:04:26:9b:ce:df:9f:c4:
ae:68:8e:5a:4f:71:aa:10:29:69:9d:ea:02:9c:e4:
ad:4d:af:2e:2a:92:01:4d:4f:cb:87:19:58:a2:71:
0f:cb:fa:05:19:6e:6c:86:af:01:37:af:77:8b:a6:
c3:76:c9:bd:5a:f7:37:bf:05:4f:71:ff:a4:57:01:
a1:c5:c2:29:75:17:78:c6:50:20:a7:af:3a:c2:67:
f6:e4:5b:b5:1e:d5:7e:b1:0d:2c:a8:0b:ec:00:ea:
b9:2f:6e:81:4b:55:e6:37:66:c2:86:a3:d1:1f:8c:
6c:0c:fc:a9:53:eb:f1:ae:1c:0c:52:7b:39:8d:3b:
68:e5:ee:88:4c:ec:3d:85:66:82:fe:57:50:35:37:
ea:7e:b2:7a:02:ff:50:60:e0:d6:ff:91:1c:05:97:
53:29:30:05:40:50:00:3f:02:9a:86:75:13:a6:db:
a3:bc:29:88:32:e1:33:9e:5c:ec:ee:cd:38:d0:0f:
52:2d:1a:a3:f5:c5:fa:21:21:f8:fb:e1:d9:cf:1e:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.178.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:1d:38:59:d8:bb:c4:27:4f:40:a4:00:ca:1b:c7:33:fd:c6:
14:31:55:89:12:f7:4f:59:3a:b6:c5:3b:0a:36:d4:8a:d8:46:
22:62:07:ab:30:ef:d9:ac:ad:8b:b3:fd:1f:f0:af:7d:fd:1c:
fb:03:0a:88:53:d7:13:81:ad:0d:50:19:6e:93:67:80:32:b5:
c8:c4:15:1c:b9:00:89:84:27:4c:1e:37:76:c9:e7:2d:65:86:
82:fe:d7:b2:47:2b:12:97:d7:05:f5:66:bf:18:b9:3f:b8:10:
e7:b4:7c:37:8e:cb:88:ec:dd:63:e4:66:43:b2:65:55:ba:67:
06:51:eb:e2:3c:37:66:a2:28:5d:51:85:d9:a0:be:e4:be:ab:
5c:2c:8e:51:7a:33:2d:99:7f:15:5e:b9:89:11:36:0f:22:05:
c3:ba:98:23:4d:a7:fd:8b:20:01:d8:e1:12:7b:f3:69:03:03:
66:11:11:f8:a9:6b:56:01:0e:7b:ea:b8:60:ec:ab:ed:f1:e9:
17:6c:42:c9:e1:8f:0d:7c:2e:7a:48:aa:40:d3:fa:23:b7:27:
b5:a7:3d:3b:ad:6a:f9:bd:39:1e:79:e9:0e:b7:7c:81:c6:d4:
a9:9a:dd:50:a7:49:bd:45:35:ac:c6:13:52:e7:f1:cd:3c:ae:
11:02:e7:d5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwODI0MTkwMzAwWhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3OUY2NDExMC8GA1UEBRMoMzJEMzUzNzQzQzhGRTJGMDhFOTdCMjJF
NUI2MDlBQkMxNENDRkUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMCRiGu2ArVMvRg5k/lKGdyOtlpiVPSll8l4fGHHNZ/7Gls1ZrLoVStMOzGof59v
4HzeAjgEJpvO35/ErmiOWk9xqhApaZ3qApzkrU2vLiqSAU1Py4cZWKJxD8v6BRlu
bIavATevd4umw3bJvVr3N78FT3H/pFcBocXCKXUXeMZQIKevOsJn9uRbtR7VfrEN
LKgL7ADquS9ugUtV5jdmwoaj0R+MbAz8qVPr8a4cDFJ7OY07aOXuiEzsPYVmgv5X
UDU36n6yegL/UGDg1v+RHAWXUykwBUBQAD8CmoZ1E6bbo7wpiDLhM55c7O7NONAP
Ui0ao/XF+iEh+Pvh2c8eesECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQy01N0PI/i
8I6Xsi5bYJq8FMz+OzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzlGNjQvNzdCRjAxOTI2MjRCMTFFRkFCMTIwRjRGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc5RjY0Lzc3QkYwMTkyNjI0QjExRUZBQjEyMEY0RkM0RjlBRTAyL010TlRkRHlQ
NHZDT2w3SXVXMkNhdkJUTV9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAesjANBgkqhkiG9w0BAQsFAAOCAQEArB04Wdi7xCdPQKQAyhvH
M/3GFDFViRL3T1k6tsU7CjbUithGImIHqzDv2ayti7P9H/Cvff0c+wMKiFPXE4Gt
DVAZbpNngDK1yMQVHLkAiYQnTB43dsnnLWWGgv7XskcrEpfXBfVmvxi5P7gQ57R8
N47LiOzdY+RmQ7JlVbpnBlHr4jw3ZqIoXVGF2aC+5L6rXCyOUXozLZl/FV65iRE2
DyIFw7qYI02n/YsgAdjhEnvzaQMDZhER+KlrVgEOe+q4YOyr7fHpF2xCyeGPDXwu
ekiqQNP6I7cntac9O61q+b05HnnpDrd8gcbUqZrdUKdJvUU1rMYTUufxzTyuEQLn
1Q==
-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:15 2024 by rpki-client on console-fra.rpki-client.org