Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
File: mAzlu_LPNdYK47ByGKtcqRAULJA.cer (raw, json)
Hash identifier: gKmzvxZ8hmZYriAliRiAGzUUyyz66b1HaMFnBGxIyZA=
Subject key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6041
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 05 Jan 2025 10:39:45 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24641 (0x6041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 5 10:39:45 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91CDBF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:f7:fc:76:5f:7e:16:05:6c:f9:1b:93:58:
c5:33:07:70:3d:10:9c:5b:12:23:44:e4:56:a3:8b:
21:6c:7a:41:b5:08:71:6d:47:bf:7e:75:b3:a9:61:
f2:7e:13:62:41:65:2c:96:f9:9b:35:e3:70:76:84:
fb:32:64:f2:04:d3:ef:cf:d2:31:94:6f:6f:5c:bd:
cf:94:0a:ae:6b:96:a6:5f:35:c6:17:d2:fa:fd:c7:
60:1c:a1:fd:c0:94:f2:67:bc:9a:48:ce:b8:8b:0f:
f3:fc:bc:62:0e:85:6b:ed:ea:8d:b7:6e:18:0c:f6:
2d:2a:3b:f4:8a:e0:b0:7c:50:ca:85:74:9d:11:9a:
bd:96:eb:cc:8a:24:a6:f1:f7:8f:37:43:12:b0:99:
52:8a:1b:c4:30:a5:87:e8:5d:4b:f3:88:c3:75:1c:
3c:4c:a5:4a:3d:12:fd:7b:55:c8:9e:be:16:05:8d:
1a:02:71:41:73:a8:f3:56:88:5c:23:c1:2d:b7:a4:
17:f5:f8:cc:84:e2:73:c5:01:80:4f:3c:82:13:64:
6d:a5:c1:fc:ff:a1:bc:d3:ec:21:4f:53:c2:ef:21:
d0:6e:c2:0a:0e:b6:f8:07:b0:ad:bc:01:5f:60:15:
bc:61:45:e8:f4:bb:8b:a8:02:7b:fb:c4:64:a2:55:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:be:d9:af:ee:94:4c:b2:94:85:be:63:2b:4a:96:8d:cd:66:
a9:fb:56:9d:14:a3:82:10:c3:e8:0e:6a:3e:30:78:30:2e:a2:
64:b3:7e:a9:ae:1e:56:bf:ea:d5:7f:46:d8:91:ae:4e:06:9b:
c6:2c:b9:f7:8a:12:d6:66:14:04:0b:da:01:08:dc:0c:ee:07:
05:6b:36:96:31:3d:05:2b:c2:22:29:e1:55:90:72:1f:9a:f5:
51:9d:20:da:84:80:33:54:c2:a0:ac:36:68:ce:36:a3:ca:11:
83:9c:32:3e:86:8e:24:ce:93:90:63:1d:99:96:f5:9f:89:c5:
8d:0c:71:79:8f:14:2e:e8:24:d3:2f:0c:e5:d5:a1:df:76:36:
bf:8e:61:a5:36:f0:18:f8:77:a9:88:ba:f5:41:be:a2:f1:93:
18:22:a8:1f:d7:fe:e0:78:37:71:f2:40:b9:37:5d:37:05:a7:
84:8a:e0:a8:8c:0f:1e:e2:1f:44:d3:48:ad:40:9f:19:cc:36:
ac:c7:35:c3:e7:21:48:f1:e3:e0:59:5d:b9:1c:53:1f:d9:6b:
2c:5c:58:94:d4:c9:8d:1c:b9:fd:d9:21:78:de:2f:2e:6f:5c:
78:06:a6:b8:e6:90:87:26:5f:97:7f:8b:a2:79:3e:1b:f8:d7:
77:be:b6:47
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTA1MTAzOTQ1WhcNMjUxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDREJGNTExMC8GA1UEBRMoOTgwQ0U1QkJGMkNGMzVENjBBRTNCMDcy
MThBQjVDQTkxMDE0MkM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AK8Z9/x2X34WBWz5G5NYxTMHcD0QnFsSI0TkVqOLIWx6QbUIcW1Hv351s6lh8n4T
YkFlLJb5mzXjcHaE+zJk8gTT78/SMZRvb1y9z5QKrmuWpl81xhfS+v3HYByh/cCU
8me8mkjOuIsP8/y8Yg6Fa+3qjbduGAz2LSo79IrgsHxQyoV0nRGavZbrzIokpvH3
jzdDErCZUoobxDClh+hdS/OIw3UcPEylSj0S/XtVyJ6+FgWNGgJxQXOo81aIXCPB
LbekF/X4zITic8UBgE88ghNkbaXB/P+hvNPsIU9Twu8h0G7CCg62+AewrbwBX2AV
vGFF6PS7i6gCe/vEZKJVy3ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSYDOW78s81
1grjsHIYq1ypEBQskDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RCRjUvNUU5QzRCQjBDQjUxMTFFRjkwNDAwRDE3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNEQkY1LzVFOUM0QkIwQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL21Bemx1X0xQ
TmRZSzQ3QnlHS3RjcVJBVUxKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAetDANBgkqhkiG9w0BAQsFAAOCAQEAi77Zr+6UTLKUhb5jK0qW
jc1mqftWnRSjghDD6A5qPjB4MC6iZLN+qa4eVr/q1X9G2JGuTgabxiy594oS1mYU
BAvaAQjcDO4HBWs2ljE9BSvCIinhVZByH5r1UZ0g2oSAM1TCoKw2aM42o8oRg5wy
PoaOJM6TkGMdmZb1n4nFjQxxeY8ULugk0y8M5dWh33Y2v45hpTbwGPh3qYi69UG+
ovGTGCKoH9f+4Hg3cfJAuTddNwWnhIrgqIwPHuIfRNNIrUCfGcw2rMc1w+chSPHj
4FlduRxTH9lrLFxYlNTJjRy5/dkheN4vLm9ceAamuOaQhyZfl3+Lonk+G/jXd762
Rw==
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:49:10 2025 by rpki-client