Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
File: bCx8FCiea7W3J1sapr_foCJ7kIY.cer (raw, json)
Hash identifier: 9D5e77wCQjKlLNzshZq64ShIv8x26PNBrONhq3KSU4E=
Subject key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5C1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 11:22:00 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23578 (0x5c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 10 11:22:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:e5:7b:ab:2c:2a:49:fa:ca:33:68:ca:27:
2f:8a:2c:f5:4d:f8:26:20:57:53:4a:5e:ae:80:b6:
bd:b9:9e:6c:7a:a6:b0:d4:e0:6e:33:57:56:6f:36:
92:c9:f1:0e:e2:87:ec:2b:4c:f9:1a:0b:08:d6:2e:
51:0e:bf:e2:53:0c:f6:c1:0c:ed:f2:79:ff:88:54:
7d:85:08:52:8f:de:4e:87:87:c6:f7:46:b4:c7:1e:
4f:8c:16:58:84:ab:d6:8c:77:0c:30:59:2b:c6:a4:
b4:9c:87:c3:18:63:76:fb:d6:4b:7a:85:4e:f2:2f:
1f:59:ec:a7:46:13:6e:7d:9b:a5:aa:58:c5:0d:9d:
c8:86:33:35:3a:e6:20:2b:b9:32:7a:41:77:1d:bd:
ea:18:5d:a5:9e:2a:27:71:ee:02:cd:71:ce:87:4a:
0d:e0:f9:cd:70:c5:76:ac:b8:c8:9e:80:e0:c8:48:
05:7b:1a:e6:e6:bc:ec:1d:a7:18:57:c6:21:03:56:
5f:85:47:73:f1:30:f5:67:2d:58:b0:27:cb:77:07:
05:b9:f8:26:b0:06:09:a0:d8:c5:d1:c3:c2:da:d6:
72:9a:f5:79:01:74:3e:d0:73:75:a3:3d:31:1b:82:
85:38:36:d9:9f:e8:42:41:98:82:a3:cb:2a:f6:8c:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.238.0/23
Signature Algorithm: sha256WithRSAEncryption
52:52:11:83:f4:be:3b:62:3f:69:c7:88:de:5c:73:20:01:8d:
2e:23:76:bd:70:70:61:ba:87:07:67:ce:2d:86:64:ab:ae:bf:
a6:33:08:f0:36:e2:ab:34:8b:0f:7a:46:c7:1c:d9:f2:21:c9:
15:34:9c:b1:61:db:1a:66:f7:18:08:56:1a:39:78:18:09:0e:
98:1e:6c:91:64:c7:f0:7b:3d:84:0d:d0:c6:b2:ca:9b:1e:bf:
bc:bb:3f:0f:75:c2:5f:17:75:43:77:bd:fd:49:72:a4:6f:74:
c5:5c:78:1d:bc:3b:0c:f7:11:4a:6c:35:f1:39:f3:2d:f7:d1:
64:e6:29:cd:49:62:49:a2:26:d9:d1:6c:04:8e:a2:c4:d8:69:
6f:2a:f6:19:b0:8c:f6:6a:3b:9e:3d:8a:25:74:56:41:bd:5e:
b3:0d:eb:b3:42:b0:5b:79:45:f5:66:eb:ec:d7:ea:37:17:fc:
06:40:f1:46:09:9b:8b:26:20:b9:b1:1d:98:aa:54:2a:00:e4:
ff:67:2a:5b:68:2a:25:27:28:ef:17:fb:2b:bf:64:9a:43:78:
44:4c:5f:1a:b6:5f:1d:3c:42:9c:ed:a2:b0:28:0f:f3:87:43:
79:51:5f:c3:5b:87:3d:8c:ff:95:bf:1e:ee:91:fa:8b:39:af:
d2:f3:36:90
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMDEwMTEyMjAwWhcNMjYwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzMTIwQTExMC8GA1UEBRMoNkMyQzdDMTQyODlFNkJCNUI3Mjc1QjFB
QTZCRkRGQTAyMjdCOTA4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALJJ5XurLCpJ+sozaMonL4os9U34JiBXU0peroC2vbmebHqmsNTgbjNXVm82ksnx
DuKH7CtM+RoLCNYuUQ6/4lMM9sEM7fJ5/4hUfYUIUo/eToeHxvdGtMceT4wWWISr
1ox3DDBZK8aktJyHwxhjdvvWS3qFTvIvH1nsp0YTbn2bpapYxQ2dyIYzNTrmICu5
MnpBdx296hhdpZ4qJ3HuAs1xzodKDeD5zXDFdqy4yJ6A4MhIBXsa5ua87B2nGFfG
IQNWX4VHc/Ew9WctWLAny3cHBbn4JrAGCaDYxdHDwtrWcpr1eQF0PtBzdaM9MRuC
hTg22Z/oQkGYgqPLKvaMdEUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRsLHwUKJ5r
tbcnWxqmv9+gInuQhjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzEyMEEvREFGODFDNDQ4NkY5MTFFRkIwOTY1MTBDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMxMjBBL0RBRjgxQzQ0ODZGOTExRUZCMDk2NTEwQ0M0RjlBRTAyL2JDeDhGQ2ll
YTdXM0oxc2Fwcl9mb0NKN2tJWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC77jANBgkqhkiG9w0BAQsFAAOCAQEAUlIRg/S+O2I/aceI3lxz
IAGNLiN2vXBwYbqHB2fOLYZkq66/pjMI8DbiqzSLD3pGxxzZ8iHJFTScsWHbGmb3
GAhWGjl4GAkOmB5skWTH8Hs9hA3QxrLKmx6/vLs/D3XCXxd1Q3e9/UlypG90xVx4
Hbw7DPcRSmw18TnzLffRZOYpzUliSaIm2dFsBI6ixNhpbyr2GbCM9mo7nj2KJXRW
Qb1esw3rs0KwW3lF9Wbr7NfqNxf8BkDxRgmbiyYgubEdmKpUKgDk/2cqW2gqJSco
7xf7K79kmkN4RExfGrZfHTxCnO2isCgP84dDeVFfw1uHPYz/lb8e7pH6izmv0vM2
kA==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:01 2024 by rpki-client on console-ams.rpki-client.org