Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (raw, json)
Hash identifier: Rt1nMM7t4QQ2Ys06TXUA9wNVWOwYiftmP6+1E2Frc8U=
Subject key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Oct 2024 14:01:33 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 128.134.0.0/16
IP: 129.254.0.0/16
IP: 134.75.0.0/16
IP: 137.68.0.0/16
IP: 139.150.0.0/16
IP: 143.248.0.0/16
IP: 147.6.0.0/16
IP: 147.43.0.0/16
IP: 147.46.0.0/15
IP: 152.99.0.0/16
IP: 152.149.0.0/16
IP: 155.230.0.0/16
IP: 156.147.0.0/16
IP: 157.66.64.0/23
IP: 157.197.0.0/16
IP: 158.44.0.0/16
IP: 160.30.106.0/23
IP: 160.30.229.0/24
IP: 160.30.232.0/23
IP: 160.30.235.0/24
IP: 160.187.186.0/23
IP: 161.122.0.0/16
IP: 164.124.0.0/15
IP: 165.132.0.0/15
IP: 165.141.0.0/16
IP: 165.186.0.0/16
IP: 165.194.0.0/16
IP: 165.213.0.0/16
IP: 165.229.0.0/16
IP: 165.243.0.0 -- 165.244.255.255
IP: 165.246.0.0/16
IP: 166.79.0.0/16
IP: 166.103.0.0 -- 166.104.255.255
IP: 166.125.0.0/16
IP: 168.78.0.0/16
IP: 168.115.0.0/16
IP: 168.126.0.0/16
IP: 168.131.0.0/16
IP: 168.154.0.0/16
IP: 168.188.0.0/16
IP: 168.219.0.0/16
IP: 168.248.0.0/15
IP: 169.140.0.0/16
IP: 169.208.0.0/12
IP: 192.5.90.0/24
IP: 192.100.2.0/24
IP: 192.104.15.0/24
IP: 192.132.15.0/24
IP: 192.132.247.0 -- 192.132.251.255
IP: 192.195.39.0 -- 192.195.40.255
IP: 192.203.138.0 -- 192.203.146.255
IP: 192.245.249.0 -- 192.245.251.255
IP: 192.249.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23514 (0x5bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 7 14:01:33 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.134.0.0/16
129.254.0.0/16
134.75.0.0/16
137.68.0.0/16
139.150.0.0/16
143.248.0.0/16
147.6.0.0/16
147.43.0.0/16
147.46.0.0/15
152.99.0.0/16
152.149.0.0/16
155.230.0.0/16
156.147.0.0/16
157.66.64.0/23
157.197.0.0/16
158.44.0.0/16
160.30.106.0/23
160.30.229.0/24
160.30.232.0/23
160.30.235.0/24
160.187.186.0/23
161.122.0.0/16
164.124.0.0/15
165.132.0.0/15
165.141.0.0/16
165.186.0.0/16
165.194.0.0/16
165.213.0.0/16
165.229.0.0/16
165.243.0.0-165.244.255.255
165.246.0.0/16
166.79.0.0/16
166.103.0.0-166.104.255.255
166.125.0.0/16
168.78.0.0/16
168.115.0.0/16
168.126.0.0/16
168.131.0.0/16
168.154.0.0/16
168.188.0.0/16
168.219.0.0/16
168.248.0.0/15
169.140.0.0/16
169.208.0.0/12
192.5.90.0/24
192.100.2.0/24
192.104.15.0/24
192.132.15.0/24
192.132.247.0-192.132.251.255
192.195.39.0-192.195.40.255
192.203.138.0-192.203.146.255
192.245.249.0-192.245.251.255
192.249.16.0/20
Signature Algorithm: sha256WithRSAEncryption
02:d5:f2:07:38:f4:c4:55:bd:99:03:2d:cb:85:01:96:17:d5:
be:0d:96:3d:91:24:b9:22:62:da:86:df:95:63:54:d8:c4:e0:
47:5e:75:7b:6d:22:87:97:30:d1:94:a0:19:14:c8:fe:8c:ab:
ee:5f:e1:5e:f9:13:13:a8:c4:0c:6a:fd:cb:10:ae:24:33:28:
0e:a7:3d:5c:a5:53:28:fd:9c:f1:20:19:4c:aa:3a:1c:16:35:
96:18:a2:87:c7:20:b7:8c:59:53:63:12:34:7c:a3:32:6c:0e:
bd:7a:e6:50:ef:8d:57:7d:b6:44:bc:95:73:c0:1a:c0:65:a0:
c0:ee:a1:52:ad:40:6e:a2:1c:98:bd:b1:d2:ba:8f:31:d5:19:
80:90:a8:2b:ec:4e:3f:94:db:a2:47:a2:e7:6d:43:ce:e6:89:
f0:e2:1c:03:db:41:22:85:ed:d3:fd:a7:e6:20:59:b4:ca:b2:
6a:c2:97:e0:eb:51:85:13:61:7a:37:09:45:04:ec:64:a7:9f:
03:a9:bb:93:38:57:62:81:ad:72:73:6c:c2:0e:c5:a7:27:99:
84:b9:45:26:c7:24:f0:97:be:cf:e7:20:75:1d:dc:d8:b5:1c:
80:ee:e9:ff:19:4b:c5:f7:1d:65:48:0e:15:27:99:75:91:13:
4d:b1:21:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org