Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer (raw, json)
Hash identifier: fsOEJ1HPSlPbLsm1svi8yzpqb7KJDog6Bbx0vY9uxZc=
Subject key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4D6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Sep 2023 18:46:31 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 136.22.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19822 (0x4d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 12 18:46:31 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:69:9f:8d:52:0e:dd:ac:2b:12:8c:83:d0:39:
9c:24:4e:6b:6a:0c:d9:03:bf:71:ca:f3:b0:c4:2d:
e2:46:57:c5:a2:84:a0:dd:09:74:32:fd:b9:7e:eb:
50:d6:14:5d:4b:c3:02:23:44:21:9c:ff:df:07:4d:
64:12:88:5a:ae:f6:eb:62:e0:29:3d:50:c6:78:f5:
1d:ca:9c:68:f9:dd:93:57:c8:b1:41:9b:40:bf:e3:
f2:3f:dc:21:d2:e4:9c:b9:00:08:38:59:ed:63:4b:
6a:33:13:e5:c9:c3:04:cd:a7:9d:33:70:04:54:41:
77:43:e6:49:6d:6a:d7:eb:a9:97:a2:39:f2:39:22:
9c:79:4e:39:22:d7:fc:1b:ee:b7:ba:cf:da:13:dc:
9f:9c:ed:9c:e5:6a:f9:95:30:4d:bf:b1:9b:2b:48:
7f:d2:99:7b:9a:7a:55:0b:f3:bb:a9:90:de:06:09:
59:3b:82:55:f7:18:a5:e0:68:96:55:70:52:cc:e3:
de:a2:c2:fc:6a:f3:13:8b:85:11:03:82:fc:b9:0d:
3e:ff:a3:de:74:5d:a5:8c:f0:48:92:56:6a:4e:3a:
7e:d5:fc:94:0b:ea:3f:9d:9c:95:05:54:4c:88:1d:
82:c3:3b:e0:d5:45:1d:be:96:b9:7d:f5:85:01:9f:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
136.22.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:28:07:d6:54:bd:8d:67:28:18:62:db:25:77:32:5e:13:a3:
19:cc:17:d8:40:ec:42:75:8f:d1:a1:6b:74:4b:6f:74:1c:a7:
89:22:ea:43:1c:75:f1:7a:a4:42:7b:e1:a8:e5:cc:d9:cd:b4:
0a:7a:06:eb:a6:ed:49:64:f7:93:1e:dd:63:9f:76:06:78:3e:
e2:01:bb:81:12:61:1b:27:7d:77:5e:23:51:11:b0:40:25:b1:
18:c4:6d:d3:6e:ce:be:81:69:5c:c7:09:62:73:3f:b2:c9:ff:
17:7f:45:ea:39:0e:a5:22:a0:50:f0:24:03:6d:7e:98:12:61:
a1:d9:2e:67:b2:ba:52:28:10:00:11:a7:0e:36:f1:2f:aa:5c:
31:14:2b:cf:51:3d:d3:5f:66:67:8d:e8:05:da:da:df:62:fa:
73:ec:ac:d2:72:17:2a:e1:38:3f:df:be:58:30:ad:6a:cd:af:
89:4a:4e:28:25:75:65:1b:05:0a:57:ca:07:50:8b:00:45:44:
26:7e:bb:1f:e0:29:2d:79:6e:3e:a4:58:7e:f3:aa:04:ad:9a:
30:da:51:da:ef:6e:09:74:3f:08:0b:10:0d:bd:08:04:48:ff:
05:16:e2:24:71:cb:cd:45:44:98:30:cb:10:d9:ad:d6:75:c2:
b9:d5:30:e5
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICTW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMwOTEyMTg0NjMxWhcNMjQwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBQkM0OTExMC8GA1UEBRMoNjAzNTVDMEQ5OTcyNkZFRTlFRTQ3QUI2
RkFFNkRGMEU5RjM4MUYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APlpn41SDt2sKxKMg9A5nCROa2oM2QO/ccrzsMQt4kZXxaKEoN0JdDL9uX7rUNYU
XUvDAiNEIZz/3wdNZBKIWq7262LgKT1Qxnj1HcqcaPndk1fIsUGbQL/j8j/cIdLk
nLkACDhZ7WNLajMT5cnDBM2nnTNwBFRBd0PmSW1q1+upl6I58jkinHlOOSLX/Bvu
t7rP2hPcn5ztnOVq+ZUwTb+xmytIf9KZe5p6VQvzu6mQ3gYJWTuCVfcYpeBollVw
Uszj3qLC/GrzE4uFEQOC/LkNPv+j3nRdpYzwSJJWak46ftX8lAvqP52clQVUTIgd
gsM74NVFHb6WuX31hQGfKHECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRgNVwNmXJv
7p7kerb65t8OnzgfEjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUJDNDkvRTU1MjM3RUMwRDc3MTFFQkI1M0FFQTQwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFCQzQ5L0U1NTIzN0VDMEQ3NzExRUJCNTNBRUE0MEM0RjlBRTAyL1lEVmNEWmx5
Yi02ZTVIcTItdWJmRHA4NEh4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBYgWIDANBgkqhkiG9w0BAQsFAAOCAQEAJigH1lS9jWcoGGLbJXcy
XhOjGcwX2EDsQnWP0aFrdEtvdByniSLqQxx18XqkQnvhqOXM2c20CnoG66btSWT3
kx7dY592Bng+4gG7gRJhGyd9d14jURGwQCWxGMRt027OvoFpXMcJYnM/ssn/F39F
6jkOpSKgUPAkA21+mBJhodkuZ7K6UigQABGnDjbxL6pcMRQrz1E9019mZ43oBdra
32L6c+ys0nIXKuE4P9++WDCtas2viUpOKCV1ZRsFClfKB1CLAEVEJn67H+ApLXlu
PqRYfvOqBK2aMNpR2u9uCXQ/CAsQDb0IBEj/BRbiJHHLzUVEmDDLENmt1nXCudUw
5Q==
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:22:05 2024 by rpki-client on console-ams.rpki-client.org