Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer (raw, json)
Hash identifier: 7AKnu64pHPOg2qUbnrtUrsXrhk+6i5mcxDZkUWHoLJs=
Subject key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 528C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 Feb 2024 04:04:28 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.72.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21132 (0x528c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 22 04:04:28 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:1a:43:96:42:a4:9a:19:aa:54:90:66:e5:
73:16:32:6d:d3:ee:52:9c:6f:66:50:49:d2:a2:30:
c9:d4:1e:5b:94:20:7e:58:c0:73:1f:ce:00:80:d2:
62:f0:5a:97:86:03:4c:9a:dc:a7:86:14:56:81:0d:
11:0b:e7:bf:e0:6a:b4:f7:c7:92:ae:69:b3:03:ce:
bb:d9:00:04:b6:5d:08:a4:e4:82:19:9f:b2:cb:b2:
10:97:7d:5f:98:f1:89:d5:9d:2e:42:96:6f:8a:d3:
f4:40:24:7e:0b:8d:68:8c:2e:d4:cc:79:d0:fd:6b:
c4:36:7e:bd:0f:4c:4e:1f:4a:99:4c:f9:69:ad:a0:
38:0d:0f:61:d9:51:66:5c:fb:3a:52:35:f3:be:fd:
49:f0:14:4d:72:60:84:60:a6:6a:ba:fb:37:da:5e:
ec:a2:63:92:3e:e8:19:c0:d3:cc:5a:18:8a:0c:c8:
73:90:17:41:0f:45:2d:b2:33:f6:16:42:b7:70:6e:
df:51:35:7d:7a:32:25:ff:8e:39:e9:ec:12:f1:98:
a5:9f:42:59:5e:12:71:9b:65:7e:28:07:a7:08:d4:
4a:10:2e:89:1f:6c:ab:74:1f:a7:24:99:bc:1a:49:
b5:13:3b:95:1b:83:e9:55:41:a5:4b:58:36:c0:12:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.72.0/23
Signature Algorithm: sha256WithRSAEncryption
56:a5:1e:f5:7c:5d:02:9c:10:f7:9f:bf:9f:b5:47:6e:06:61:
d0:08:a0:0c:84:83:59:ca:e8:dc:ed:49:9d:57:8f:e0:e3:dc:
90:d3:bb:50:65:a4:16:70:42:b3:e5:ea:24:0e:f1:04:3a:fa:
07:5d:64:21:b7:f3:1b:76:a1:91:42:f9:99:ad:a6:00:c1:8a:
b6:b5:40:ee:0e:9f:04:49:a3:e2:7e:b2:28:2d:09:a7:09:a2:
83:5a:58:ae:3b:f2:73:88:b1:2b:b5:6e:23:db:f7:ea:63:4f:
a5:d7:c5:00:51:64:42:8b:77:31:aa:ed:f5:a0:32:15:cf:cd:
03:b5:28:59:3a:2e:c7:6c:05:82:ba:9a:fc:79:6d:3e:a5:59:
5e:98:85:53:46:7a:4f:79:5f:92:a8:c0:9c:a2:84:95:32:73:
4a:05:c6:dd:4d:cb:e2:7e:db:e6:4e:7d:30:a4:de:86:d1:de:
5e:e2:a2:34:03:c4:cb:8c:b0:8d:88:64:18:5c:d6:7a:9d:7c:
86:52:eb:ac:9d:da:d6:9b:59:a4:96:90:f4:a7:3a:f2:c5:aa:
00:87:16:48:de:25:3b:24:89:f0:f9:93:a2:32:f4:52:27:ff:
02:b6:61:b0:9b:ff:94:ba:92:58:f0:08:91:20:45:a4:33:9d:
8b:3b:5f:75
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjIyMDQwNDI4WhcNMjUwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBNEVGOTExMC8GA1UEBRMoODcyQzkzNjg2NTZDNzc4MzU3QzJBNUE5
OUJFQ0ZGRjY3NzU1MEFDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJ7/GkOWQqSaGapUkGblcxYybdPuUpxvZlBJ0qIwydQeW5QgfljAcx/OAIDSYvBa
l4YDTJrcp4YUVoENEQvnv+BqtPfHkq5pswPOu9kABLZdCKTkghmfssuyEJd9X5jx
idWdLkKWb4rT9EAkfguNaIwu1Mx50P1rxDZ+vQ9MTh9KmUz5aa2gOA0PYdlRZlz7
OlI18779SfAUTXJghGCmarr7N9pe7KJjkj7oGcDTzFoYigzIc5AXQQ9FLbIz9hZC
t3Bu31E1fXoyJf+OOensEvGYpZ9CWV4ScZtlfigHpwjUShAuiR9sq3QfpySZvBpJ
tRM7lRuD6VVBpUtYNsAStIkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSHLJNoZWx3
g1fCpamb7P/2d1UKyDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRFRjkvNzVBMENEMTREMTM3MTFFRUFBOUYxOTgwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE0RUY5Lzc1QTBDRDE0RDEzNzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1Zz
ZDROWHdxV3BtLXpfOW5kVkNzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KSDANBgkqhkiG9w0BAQsFAAOCAQEAVqUe9XxdApwQ95+/n7VH
bgZh0AigDISDWcro3O1JnVeP4OPckNO7UGWkFnBCs+XqJA7xBDr6B11kIbfzG3ah
kUL5ma2mAMGKtrVA7g6fBEmj4n6yKC0Jpwmig1pYrjvyc4ixK7VuI9v36mNPpdfF
AFFkQot3Mart9aAyFc/NA7UoWToux2wFgrqa/HltPqVZXpiFU0Z6T3lfkqjAnKKE
lTJzSgXG3U3L4n7b5k59MKTehtHeXuKiNAPEy4ywjYhkGFzWep18hlLrrJ3a1ptZ
pJaQ9Kc68sWqAIcWSN4lOySJ8PmTojL0Uif/ArZhsJv/lLqSWPAIkSBFpDOdiztf
dQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org