Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer (raw, json)
Hash identifier: UCzYE9qTuG3idYKQqT54zVSoLD2NFewglb6tuMXE6us=
Subject key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58D2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Jul 2024 17:27:15 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 137.147.0.0/16
IP: 138.130.0.0/16
IP: 138.217.0.0/16
IP: 139.130.0.0/16
IP: 139.134.0.0/16
IP: 139.168.0.0/16
IP: 143.238.0.0/16
IP: 144.130.0.0 -- 144.140.255.255
IP: 147.10.0.0/16
IP: 147.69.0.0/16
IP: 149.135.0.0/16
IP: 149.167.0.0/16
IP: 155.143.0.0/16
IP: 165.228.0.0/16
IP: 192.67.84.0/24
IP: 192.70.219.0/24
IP: 192.73.66.0/24
IP: 192.74.139.0 -- 192.74.208.255
IP: 192.82.143.0/24
IP: 192.111.105.0/24
IP: 192.131.27.0 -- 192.131.30.255
IP: 192.148.116.0 -- 192.148.165.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22738 (0x58d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 23 17:27:15 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:1d:aa:6f:69:f1:ab:bc:b0:97:d8:b3:e6:
1f:44:a2:cd:57:33:8c:d9:00:1a:ea:2b:03:26:9c:
a5:37:e6:e6:a3:09:d9:6a:bb:dc:6d:58:4c:b2:9e:
31:ec:de:88:19:6e:19:fa:dd:3d:9f:68:45:f7:9f:
fb:f8:9d:30:e4:13:0b:59:cb:5c:c5:a9:5f:94:74:
1e:cc:6a:0f:96:bd:c3:ff:19:f2:70:3c:5b:4d:d9:
9e:cf:0a:6f:5a:e8:84:64:f5:eb:2c:9f:60:ae:e0:
93:15:12:39:b5:ef:c8:ab:f2:2e:8f:61:5f:4c:0d:
d9:c4:af:89:ff:ac:fe:6f:3c:59:4a:a3:66:9a:9f:
6b:39:33:70:93:ac:ad:73:00:f5:15:1a:43:65:9a:
2e:7b:da:d7:ad:9a:f1:b2:7e:69:51:5f:44:3c:96:
2b:7d:d8:8e:fa:37:a0:a4:ea:1a:e7:6e:20:4e:e8:
98:43:74:6a:1f:62:9c:9f:3a:74:bd:db:5f:f1:4d:
6d:bb:d9:59:6f:41:4f:06:ae:be:f8:15:8b:83:8f:
28:04:e1:01:65:81:59:77:ab:48:9c:74:ff:25:52:
a6:3b:d0:cb:c3:fa:61:7f:bb:a9:5f:32:db:e3:a0:
c9:ce:6d:2c:0b:4c:bd:8b:52:54:5c:bf:9d:d3:66:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.147.0.0/16
138.130.0.0/16
138.217.0.0/16
139.130.0.0/16
139.134.0.0/16
139.168.0.0/16
143.238.0.0/16
144.130.0.0-144.140.255.255
147.10.0.0/16
147.69.0.0/16
149.135.0.0/16
149.167.0.0/16
155.143.0.0/16
165.228.0.0/16
192.67.84.0/24
192.70.219.0/24
192.73.66.0/24
192.74.139.0-192.74.208.255
192.82.143.0/24
192.111.105.0/24
192.131.27.0-192.131.30.255
192.148.116.0-192.148.165.255
Signature Algorithm: sha256WithRSAEncryption
9c:35:a7:21:5c:68:9b:d8:60:89:d6:eb:c9:37:4f:49:0a:6d:
ed:7c:1a:bb:e0:8c:15:9b:dd:d1:e6:6a:a1:d0:b0:7f:dc:75:
80:28:d7:69:0e:55:55:a6:79:3d:e0:05:aa:49:d7:ab:04:2d:
04:23:14:e4:a0:11:49:bb:ea:21:b7:c7:24:ec:16:53:7b:f5:
23:ce:a1:6e:e8:80:3d:d5:73:39:94:29:e1:be:c0:97:25:b7:
39:a8:1c:59:a8:e2:8c:f6:b5:75:19:80:14:c4:40:cd:fd:ee:
f3:db:24:56:8f:34:d7:c5:5c:dd:6d:14:42:33:f9:9c:f5:38:
9a:1f:37:b0:7e:c6:d5:be:18:c3:d9:4b:bc:4e:e1:a5:84:c1:
d6:14:a4:20:06:b7:83:2e:7d:bd:91:e7:70:09:2f:92:fd:83:
0d:ef:ef:3a:b8:f6:17:4c:0f:7d:29:eb:ef:0d:a7:29:a2:98:
7f:7d:f3:2f:10:50:05:9d:c4:03:f6:66:a2:45:97:63:0a:5d:
6b:a3:48:40:39:f1:eb:f5:47:5a:17:71:6d:43:8b:8e:29:b3:
b6:46:86:d6:55:ca:55:f5:3a:e1:e6:14:0f:b2:3e:f4:20:a8:
40:ec:19:a6:cd:ee:af:0c:a9:b9:7c:38:21:8f:74:36:34:e5:
e6:23:f3:d5
-----BEGIN CERTIFICATE-----
MIIGkTCCBXmgAwIBAgICWNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNzIzMTcyNzE1WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2QTk4MzExMC8GA1UEBRMoODhEODdCMTAyRjVDMjc3MUMzNjcwNjRF
MjA0OUI2OEE5MDNDNzFCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKqJHapvafGrvLCX2LPmH0SizVczjNkAGuorAyacpTfm5qMJ2Wq73G1YTLKeMeze
iBluGfrdPZ9oRfef+/idMOQTC1nLXMWpX5R0HsxqD5a9w/8Z8nA8W03Zns8Kb1ro
hGT16yyfYK7gkxUSObXvyKvyLo9hX0wN2cSvif+s/m88WUqjZpqfazkzcJOsrXMA
9RUaQ2WaLnva162a8bJ+aVFfRDyWK33Yjvo3oKTqGuduIE7omEN0ah9inJ86dL3b
X/FNbbvZWW9BTwauvvgVi4OPKAThAWWBWXerSJx0/yVSpjvQy8P6YX+7qV8y2+Og
yc5tLAtMvYtSVFy/ndNmLbsCAwEAAaOCA4cwggODMB0GA1UdDgQWBBSI2HsQL1wn
ccNnBk4gSbaKkDxxtTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZBOTgzLzBFMDgyRTcyQ0QwRjExRTg5RDlGRjE2NUM0RjlBRTAyL2lOaDdFQzlj
SjNIRFp3Wk9JRW0yaXBBOGNiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCBsgYIKwYBBQUHAQcBAf8EgaIw
gZ8wgZwEAgABMIGVAwMAiZMDAwCKggMDAIrZAwMAi4IDAwCLhgMDAIuoAwMAj+4w
CgMDAZCCAwMAkIwDAwCTCgMDAJNFAwMAlYcDAwCVpwMDAJuPAwMApeQDBADAQ1QD
BADARtsDBADASUIwDAMEAMBKiwMEAMBK0AMEAMBSjwMEAMBvaTAMAwQAwIMbAwQA
wIMeMAwDBALAlHQDBAHAlKQwDQYJKoZIhvcNAQELBQADggEBAJw1pyFcaJvYYInW
68k3T0kKbe18GrvgjBWb3dHmaqHQsH/cdYAo12kOVVWmeT3gBapJ16sELQQjFOSg
EUm76iG3xyTsFlN79SPOoW7ogD3VczmUKeG+wJcltzmoHFmo4oz2tXUZgBTEQM39
7vPbJFaPNNfFXN1tFEIz+Zz1OJofN7B+xtW+GMPZS7xO4aWEwdYUpCAGt4Mufb2R
53AJL5L9gw3v7zq49hdMD30p6+8NpymimH998y8QUAWdxAP2ZqJFl2MKXWujSEA5
8ev1R1oXcW1Di44ps7ZGhtZVylX1OuHmFA+yPvQgqEDsGabN7q8Mqbl8OCGPdDY0
5eYj89U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org