Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
File: RwHPLSggCdbG6vRVb7DcGw1VV-8.cer (raw, json)
Hash identifier: Ah+ZpfU64jSGX2vnCepRBkcNzbCRkvoKsJwbrq13x10=
Subject key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5E70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Nov 2024 09:42:39 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.140.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jan 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24176 (0x5e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 26 09:42:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:09:4f:1b:7f:65:1d:3e:5b:e4:5b:1a:13:
99:7e:96:81:2a:01:57:b1:20:f0:8b:87:f9:32:6a:
57:77:ba:ef:48:1f:de:84:aa:68:48:d6:4e:1d:dc:
48:99:e9:c9:06:9c:87:f5:6b:22:6e:87:ab:29:61:
b6:33:b6:44:cd:45:a9:5c:0c:5c:f3:f9:b1:07:1f:
84:f5:28:49:3d:07:35:00:d7:27:53:39:e2:7e:e5:
85:0d:6c:7a:14:a8:2e:0d:90:54:27:2a:15:3d:ff:
d6:91:8f:05:7c:78:03:47:68:a8:17:e4:42:8d:94:
48:93:03:40:53:be:d3:9b:7d:5c:d4:46:88:30:67:
e6:23:94:b8:7e:1d:90:60:22:96:52:66:65:7b:dc:
8d:b6:aa:8f:2a:bf:f0:43:e6:39:f7:a3:34:aa:0a:
de:05:d7:d5:3c:db:cb:d9:6a:0c:8c:60:11:ff:8b:
a1:98:77:e2:b0:cb:76:e0:bb:5d:69:2d:9a:62:e1:
b5:b6:84:53:94:e6:ae:b1:36:3b:d2:22:c5:ed:0d:
81:b3:c0:aa:3e:3f:b8:47:37:cf:db:b0:7f:ec:97:
a1:26:7e:4f:40:1c:1f:b1:79:3d:e0:6e:36:3d:97:
40:d9:28:94:85:2e:03:7e:80:42:a0:c1:a5:5a:fc:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.140.0/23
Signature Algorithm: sha256WithRSAEncryption
34:a2:92:5d:a5:a2:41:5f:90:53:ed:f1:1b:ca:83:ce:41:60:
a9:90:44:fc:f8:45:fc:48:b8:ce:64:73:41:96:97:5f:a8:a8:
24:fb:8e:3e:45:9f:98:4a:e5:81:d4:9a:3c:c5:b5:04:97:0a:
10:42:1c:7e:d5:87:78:4c:ec:f9:86:34:c1:67:7d:d7:91:ca:
74:a2:a3:db:ca:44:cf:92:f6:2f:20:ec:77:1e:fb:92:d0:81:
00:a3:94:73:97:93:51:09:0b:b9:24:4b:e1:02:e0:fa:f1:02:
33:ac:b2:b4:80:6d:19:27:3f:34:ce:10:6e:19:79:71:67:a4:
72:25:94:4d:61:c8:7e:89:aa:0f:9c:2c:21:ce:fd:5c:fc:02:
15:8a:8b:16:48:5a:71:b1:39:6a:f1:f4:9e:c3:a4:e6:95:3b:
96:c8:4d:60:ea:3f:e4:81:ee:88:51:68:5d:c5:c4:db:6d:ed:
c4:43:38:37:4a:e7:8b:fe:df:e6:e9:9b:5b:12:93:83:e0:b0:
36:3a:ba:de:7f:39:c9:79:bd:99:b7:8c:ef:63:b8:e2:c0:d4:
d9:fd:35:3e:69:7e:c6:6c:42:a0:76:a0:9b:2d:c3:55:36:76:
5f:af:71:f1:c3:6c:56:91:b2:8d:d0:d8:bc:92:23:85:27:3a:
75:be:07:5c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMTI2MDk0MjM5WhcNMjYwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1
NkZCMERDMUIwRDU1NTdFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALawCU8bf2UdPlvkWxoTmX6WgSoBV7Eg8IuH+TJqV3e670gf3oSqaEjWTh3cSJnp
yQach/VrIm6HqylhtjO2RM1FqVwMXPP5sQcfhPUoST0HNQDXJ1M54n7lhQ1sehSo
Lg2QVCcqFT3/1pGPBXx4A0doqBfkQo2USJMDQFO+05t9XNRGiDBn5iOUuH4dkGAi
llJmZXvcjbaqjyq/8EPmOfejNKoK3gXX1Tzby9lqDIxgEf+LoZh34rDLduC7XWkt
mmLhtbaEU5TmrrE2O9Iixe0NgbPAqj4/uEc3z9uwf+yXoSZ+T0AcH7F5PeBuNj2X
QNkolIUuA36AQqDBpVr83f8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRHAc8tKCAJ
1sbq9FVvsNwbDVVX7zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OERBQzUvQzM5NTgyQzBBQkRBMTFFRkExQzE0RTc2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThEQUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dn
Q2RiRzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC/jDANBgkqhkiG9w0BAQsFAAOCAQEANKKSXaWiQV+QU+3xG8qD
zkFgqZBE/PhF/Ei4zmRzQZaXX6ioJPuOPkWfmErlgdSaPMW1BJcKEEIcftWHeEzs
+YY0wWd915HKdKKj28pEz5L2LyDsdx77ktCBAKOUc5eTUQkLuSRL4QLg+vECM6yy
tIBtGSc/NM4Qbhl5cWekciWUTWHIfomqD5wsIc79XPwCFYqLFkhacbE5avH0nsOk
5pU7lshNYOo/5IHuiFFoXcXE223txEM4N0rni/7f5umbWxKTg+CwNjq63n85yXm9
mbeM72O44sDU2f01Pml+xmxCoHagmy3DVTZ2X69x8cNsVpGyjdDYvJIjhSc6db4H
XA==
-----END CERTIFICATE-----
Generated at Sun Dec 29 05:58:00 2024 by rpki-client on console-ams.rpki-client.org