Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer (raw, json)
Hash identifier: TK2S9TUOdipv1CrINQNchZXVc70Jm8jFa0qy4P52lBY=
Subject key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 55D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 May 2024 18:41:44 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.20.116.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21977 (0x55d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 20 18:41:44 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:95:90:2f:17:f0:8c:5b:e2:e3:5a:ac:bf:
77:18:5a:ad:4e:35:89:9a:20:05:fd:f5:a4:35:db:
c0:36:57:1e:ff:e4:2b:31:56:d6:57:56:9e:c0:d6:
d3:71:86:d1:2f:f7:3d:e9:15:91:69:9f:4f:e3:f7:
01:41:e5:5b:5a:10:16:a0:9f:c5:18:b6:37:8f:66:
ce:24:b4:0f:fa:4e:ed:2b:d6:38:b3:8b:86:cc:51:
ff:fd:35:19:60:67:b2:6f:55:cd:e4:74:c9:ae:8f:
c9:a1:17:e7:e9:5f:9e:0b:ac:00:b2:f1:77:92:4c:
7e:82:3b:1c:f3:b1:bf:aa:30:d9:90:f9:3b:e7:b6:
d1:e5:89:50:d2:0f:a3:c3:17:9f:53:1c:1c:06:17:
44:b7:49:ad:ac:49:26:da:7c:b0:b2:76:e6:da:b6:
b9:0d:c5:15:fb:61:59:69:64:92:b7:9f:37:be:cf:
26:1f:c8:1f:39:f0:99:09:71:37:36:c6:be:b0:ca:
ad:3b:e3:b2:e3:dc:b0:60:c4:d3:1c:34:c9:d6:70:
c6:f2:f4:0f:1b:80:26:af:be:a3:95:5d:53:44:53:
ad:af:99:81:e0:85:10:fc:20:07:53:af:e1:89:d4:
62:9c:97:19:de:b0:ff:c6:49:c3:0a:de:09:a8:5a:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.116.0/23
Signature Algorithm: sha256WithRSAEncryption
25:2f:ca:fe:3f:00:a5:e1:a7:1b:43:6f:a4:e6:f1:89:50:04:
03:e0:7c:c0:0a:b5:0c:86:3d:da:df:ba:8e:4e:99:cd:b9:12:
6d:24:3a:90:bc:e3:62:12:d1:cc:9b:03:49:c2:71:a5:54:16:
63:e8:2a:55:81:a0:ef:f2:20:24:26:ea:49:ee:84:ae:1e:bb:
0a:84:c9:e0:b8:d2:33:48:69:6b:a6:a6:ec:e6:ff:0f:d2:19:
2b:e6:ac:09:7d:51:73:42:f6:dd:a3:90:bb:d2:8e:22:8c:99:
b3:bc:65:bd:54:df:7b:0e:30:be:05:2a:54:a2:b6:ee:db:27:
39:1f:f1:98:84:f9:b8:73:cf:6c:77:c3:96:8d:76:87:12:77:
26:f5:4e:2d:bc:dd:dd:f9:f3:d3:9b:36:00:07:65:65:03:21:
ac:eb:7f:97:de:21:a6:d8:e7:f2:6b:4a:ef:f3:6d:0d:69:12:
98:b6:3f:48:d1:08:3b:00:09:3c:2a:e6:cb:c0:17:51:fb:d3:
76:fd:42:e4:e2:a5:7d:91:93:35:f0:e4:ae:9c:17:7c:b5:c8:
ec:a3:d1:6b:10:86:75:75:a8:8a:01:d4:4c:4d:51:08:c3:b2:
30:6d:1a:ed:70:fc:2f:dc:8a:58:37:4b:f5:4b:c4:9b:ef:6d:
f3:05:0a:59
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICVdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNTIwMTg0MTQ0WhcNMjUwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3MDVENzExMC8GA1UEBRMoQUE0NDA1QjFCRkE5NkM5QzY5QjAyOTAz
M0VGNDgxRDhGNThBNzdFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMQIlZAvF/CMW+LjWqy/dxharU41iZogBf31pDXbwDZXHv/kKzFW1ldWnsDW03GG
0S/3PekVkWmfT+P3AUHlW1oQFqCfxRi2N49mziS0D/pO7SvWOLOLhsxR//01GWBn
sm9VzeR0ya6PyaEX5+lfngusALLxd5JMfoI7HPOxv6ow2ZD5O+e20eWJUNIPo8MX
n1McHAYXRLdJraxJJtp8sLJ25tq2uQ3FFfthWWlkkrefN77PJh/IHznwmQlxNzbG
vrDKrTvjsuPcsGDE0xw0ydZwxvL0DxuAJq++o5VdU0RTra+ZgeCFEPwgB1Ov4YnU
YpyXGd6w/8ZJwwreCaha7f8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSqRAWxv6ls
nGmwKQM+9IHY9Yp35TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA1RDcvOTZBMzZBQTgxNkQ4MTFFRkJGOTAxRTVGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcwNUQ3Lzk2QTM2QUE4MTZEODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1w
Ykp4cHNDa0RQdlNCMlBXS2QtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAUdDANBgkqhkiG9w0BAQsFAAOCAQEAJS/K/j8ApeGnG0NvpObx
iVAEA+B8wAq1DIY92t+6jk6ZzbkSbSQ6kLzjYhLRzJsDScJxpVQWY+gqVYGg7/Ig
JCbqSe6Erh67CoTJ4LjSM0hpa6am7Ob/D9IZK+asCX1Rc0L23aOQu9KOIoyZs7xl
vVTfew4wvgUqVKK27tsnOR/xmIT5uHPPbHfDlo12hxJ3JvVOLbzd3fnz05s2AAdl
ZQMhrOt/l94hptjn8mtK7/NtDWkSmLY/SNEIOwAJPCrmy8AXUfvTdv1C5OKlfZGT
NfDkrpwXfLXI7KPRaxCGdXWoigHUTE1RCMOyMG0a7XD8L9yKWDdL9UvEm+9t8wUK
WQ==
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:55:27 2024 by rpki-client on console-ams.rpki-client.org