Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer (raw, json)
Hash identifier: xnoWHsf5xxYu3MpoB7uA8qhXuzCwKlyX6oGxxz+8LH0=
Subject key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5DB9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Nov 2024 05:46:43 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.238.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23993 (0x5db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 13 05:46:43 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:3b:85:45:e7:e6:dd:b6:0a:5b:fa:08:63:
19:71:c1:1b:be:ef:5f:a1:65:2b:f2:0f:1a:2a:73:
32:71:e0:6c:c2:65:33:3c:69:f5:57:ee:3c:4a:60:
51:1f:42:e2:a0:fe:3b:9f:37:5b:9b:66:c6:ad:dd:
7f:fd:3e:1e:41:1d:32:cb:76:08:1c:c9:15:41:ed:
28:b5:2c:7f:32:15:d3:4b:76:30:10:ce:4a:3a:00:
50:47:ee:0e:0b:da:61:85:3a:0d:14:0d:6a:6a:60:
1f:50:69:d7:66:11:55:12:4a:93:ea:88:08:a0:13:
e8:83:17:d4:29:54:ba:2d:c3:06:9e:f3:78:66:12:
f4:f1:49:0e:de:e9:26:e0:43:d5:f9:7a:9c:03:da:
68:a2:b8:a9:94:28:cb:90:82:03:74:bc:25:33:49:
2a:75:3d:e7:96:e8:85:ce:7f:67:5c:dc:b0:46:61:
9e:cf:31:35:ab:91:c6:5b:53:e0:9d:a6:25:53:d5:
f9:e2:e7:1a:36:77:37:f1:b8:2c:74:0e:84:a9:c6:
55:fa:2d:2a:7c:db:6e:d5:5f:ca:ab:b7:af:60:7e:
7f:5c:53:bc:ed:fc:8e:a2:63:62:1c:bd:29:0e:98:
48:51:df:73:b7:f8:e5:b5:70:7a:74:45:01:ba:b7:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.238.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:fc:75:54:f5:6e:53:9b:50:10:ce:e6:07:c3:c3:06:c3:1c:
10:df:2d:e7:80:61:9b:ba:a2:58:97:a3:08:33:f5:24:98:84:
ec:26:5d:56:55:be:59:15:99:91:41:cf:ac:25:3d:b9:8e:d2:
14:df:15:c6:5e:a4:e7:49:18:39:5c:f2:e3:d0:23:b0:79:4b:
e2:70:20:32:89:d7:32:5f:99:96:a3:c4:05:5d:d6:40:7a:61:
d7:6c:5c:9a:44:ee:1f:65:91:4d:19:9c:6b:48:9f:70:5e:26:
78:ad:76:fc:bf:07:c5:86:19:7a:23:0c:7d:ae:53:34:02:6b:
99:22:37:f9:14:17:80:70:78:ec:b6:7e:9c:b9:50:d7:d7:49:
85:51:43:d4:0c:0f:b0:42:99:0f:47:99:27:6a:03:09:91:35:
16:5e:80:d6:c3:58:e5:3d:44:38:0f:ce:4c:4b:6b:d1:c1:8e:
73:eb:01:d1:e4:0e:3b:77:19:cb:73:06:3e:4a:dc:6c:08:ad:
a6:39:e3:c3:82:69:fb:c4:32:a8:99:c4:73:b6:1a:d5:cd:b6:
0f:c0:bc:6f:68:47:e9:7d:8c:c0:29:d6:7d:24:7b:48:16:a5:
8f:3e:b9:bf:a0:20:0d:fb:bb:01:1e:da:75:14:98:40:d5:30:
9a:01:fa:70
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMTEzMDU0NjQzWhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2NDE2NDExMC8GA1UEBRMoQTg3MzcyMDFGQTRDNjRGQTAwNTY0MDIy
REIwNkY2MEU3RUUyQ0QwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALdkO4VF5+bdtgpb+ghjGXHBG77vX6FlK/IPGipzMnHgbMJlMzxp9VfuPEpgUR9C
4qD+O583W5tmxq3df/0+HkEdMst2CBzJFUHtKLUsfzIV00t2MBDOSjoAUEfuDgva
YYU6DRQNampgH1Bp12YRVRJKk+qICKAT6IMX1ClUui3DBp7zeGYS9PFJDt7pJuBD
1fl6nAPaaKK4qZQoy5CCA3S8JTNJKnU955bohc5/Z1zcsEZhns8xNauRxltT4J2m
JVPV+eLnGjZ3N/G4LHQOhKnGVfotKnzbbtVfyqu3r2B+f1xTvO38jqJjYhy9KQ6Y
SFHfc7f45bVwenRFAbq3uBkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSoc3IB+kxk
+gBWQCLbBvYOfuLNDTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQxNjQvQTY4RTI2NEVBMTgyMTFFRjhGNEUxNjIzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY0MTY0L0E2OEUyNjRFQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBN
WlBvQVZrQWkyd2IyRG43aXpRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaC/7jANBgkqhkiG9w0BAQsFAAOCAQEAwvx1VPVuU5tQEM7mB8PD
BsMcEN8t54Bhm7qiWJejCDP1JJiE7CZdVlW+WRWZkUHPrCU9uY7SFN8Vxl6k50kY
OVzy49AjsHlL4nAgMonXMl+ZlqPEBV3WQHph12xcmkTuH2WRTRmca0ifcF4meK12
/L8HxYYZeiMMfa5TNAJrmSI3+RQXgHB47LZ+nLlQ19dJhVFD1AwPsEKZD0eZJ2oD
CZE1Fl6A1sNY5T1EOA/OTEtr0cGOc+sB0eQOO3cZy3MGPkrcbAitpjnjw4Jp+8Qy
qJnEc7Ya1c22D8C8b2hH6X2MwCnWfSR7SBaljz65v6AgDfu7AR7adRSYQNUwmgH6
cA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:41 2024 by rpki-client on console-ams.rpki-client.org