Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer (raw, json)
Hash identifier: ULdDo4Tu112dvj3iABW/EKKYMyea1ecOicu6P39KSd4=
Subject key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 51C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 Feb 2024 07:01:59 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.69.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20928 (0x51c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 7 07:01:59 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:3a:60:45:7e:19:3c:ff:98:3c:14:48:2b:
3f:5d:25:86:b1:72:16:78:8c:23:bc:b8:7d:83:8c:
94:f1:32:3b:1c:76:46:82:38:5c:69:ab:32:5d:73:
1a:6e:37:fd:8e:66:0f:70:b9:89:36:ad:38:ae:13:
a8:9f:63:18:51:c1:c7:21:4c:ab:6e:f1:74:8a:dc:
c8:1f:17:84:99:d3:2d:09:a7:ac:bb:3e:9a:57:58:
3f:11:0d:f8:ad:f1:d1:c4:4c:84:1c:77:9f:9d:bb:
a3:d8:03:ae:08:51:72:0e:5d:59:2c:32:5f:48:55:
cc:13:1f:b8:80:1d:15:75:79:f8:88:12:41:4e:5d:
c8:f8:77:b8:96:14:e5:eb:a9:1f:2c:6a:2b:89:01:
89:09:ba:3b:2f:06:f2:21:b7:f0:78:0c:9b:84:de:
d7:83:b9:cc:18:18:95:79:67:9b:68:33:d5:cc:d1:
e9:f3:03:71:ef:36:d2:d0:49:a3:aa:22:4c:59:43:
92:90:c3:8e:a0:f0:8a:7a:1d:10:41:d2:9d:89:f1:
ce:6d:ad:9b:9b:cb:86:e0:13:05:71:47:21:de:82:
0e:3b:d0:63:62:1b:87:1e:98:ed:d1:be:2b:d0:ef:
66:8d:60:67:bf:1c:97:1c:55:bd:c0:15:24:b2:49:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f9:1e:2f:67:10:76:58:88:90:57:bd:0f:ba:42:de:c6:cb:
9e:ca:b8:ba:d3:e5:31:c5:1f:1c:f2:33:f4:10:d9:6a:db:7b:
e1:7e:89:2d:88:48:bb:65:40:e8:c8:7d:f8:b5:84:8e:62:da:
ca:9e:96:8c:80:0b:16:7b:6b:a4:e9:a8:62:08:b9:d3:33:05:
29:c6:d4:09:51:bf:67:cf:24:5b:bf:c5:06:17:58:40:53:15:
12:37:8e:86:6e:39:5d:cb:45:c1:1a:47:39:0c:af:db:db:71:
c4:f7:a9:01:bf:35:96:2f:13:54:13:14:f1:31:4f:8b:5f:48:
f8:d6:16:cd:17:79:c6:62:64:55:53:95:2f:6c:61:8e:98:db:
97:c5:cf:ca:30:26:34:95:24:81:97:3b:30:fe:fa:c8:94:aa:
87:71:18:6b:a4:4c:e6:9f:41:4e:5b:27:17:92:20:1a:ed:f1:
98:f2:3f:b9:31:96:73:bb:e0:e1:9b:fd:15:e4:f3:8a:86:54:
d7:fa:10:c0:72:3d:12:35:1e:38:ef:16:9c:f8:b9:dd:f8:27:
09:92:08:37:fb:10:e2:51:5a:71:03:e9:2f:3d:c3:9c:cc:60:
e6:a1:da:76:0b:f3:8c:99:83:cb:4e:7e:51:3e:cb:e9:53:62:
9f:82:be:35
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjA3MDcwMTU5WhcNMjUwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5QzIwMzExMC8GA1UEBRMoQjE1MkE3OUYxQkU5NzgzM0MyQTZGQ0Q2
RjQ5RjlEQkZEODQzQzk4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANTzOmBFfhk8/5g8FEgrP10lhrFyFniMI7y4fYOMlPEyOxx2RoI4XGmrMl1zGm43
/Y5mD3C5iTatOK4TqJ9jGFHBxyFMq27xdIrcyB8XhJnTLQmnrLs+mldYPxEN+K3x
0cRMhBx3n527o9gDrghRcg5dWSwyX0hVzBMfuIAdFXV5+IgSQU5dyPh3uJYU5eup
HyxqK4kBiQm6Oy8G8iG38HgMm4Te14O5zBgYlXlnm2gz1czR6fMDce820tBJo6oi
TFlDkpDDjqDwinodEEHSnYnxzm2tm5vLhuATBXFHId6CDjvQY2Ibhx6Y7dG+K9Dv
Zo1gZ78clxxVvcAVJLJJ7+MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSxUqefG+l4
M8Km/Nb0n52/2EPJgzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUMyMDMvQzU5ODEyRjhDNTg2MTFFRTkxMTY2QjgzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDMjAzL0M1OTgxMkY4QzU4NjExRUU5MTE2NkI4M0M0RjlBRTAyL3NWS25ueHZw
ZURQQ3B2elc5Si1kdjloRHlZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJ0PRTANBgkqhkiG9w0BAQsFAAOCAQEAC/keL2cQdliIkFe9D7pC
3sbLnsq4utPlMcUfHPIz9BDZatt74X6JLYhIu2VA6Mh9+LWEjmLayp6WjIALFntr
pOmoYgi50zMFKcbUCVG/Z88kW7/FBhdYQFMVEjeOhm45XctFwRpHOQyv29txxPep
Ab81li8TVBMU8TFPi19I+NYWzRd5xmJkVVOVL2xhjpjbl8XPyjAmNJUkgZc7MP76
yJSqh3EYa6RM5p9BTlsnF5IgGu3xmPI/uTGWc7vg4Zv9FeTzioZU1/oQwHI9EjUe
OO8WnPi53fgnCZIIN/sQ4lFacQPpLz3DnMxg5qHadgvzjJmDy05+UT7L6VNin4K+
NQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:41 2024 by rpki-client on console-ams.rpki-client.org