Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (raw, json)
Hash identifier: Mi4MXR6WclKizNDPM5KOaW0P1M2k2misoHgNueabeh8=
Subject key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5430
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Apr 2024 15:11:34 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 128.134.0.0/16
IP: 129.254.0.0/16
IP: 134.75.0.0/16
IP: 137.68.0.0/16
IP: 139.150.0.0/16
IP: 143.248.0.0/16
IP: 147.6.0.0/16
IP: 147.43.0.0/16
IP: 147.46.0.0/15
IP: 152.99.0.0/16
IP: 152.149.0.0/16
IP: 155.230.0.0/16
IP: 156.147.0.0/16
IP: 157.66.64.0/23
IP: 157.197.0.0/16
IP: 158.44.0.0/16
IP: 161.122.0.0/16
IP: 164.124.0.0/15
IP: 165.132.0.0/15
IP: 165.141.0.0/16
IP: 165.186.0.0/16
IP: 165.194.0.0/16
IP: 165.213.0.0/16
IP: 165.229.0.0/16
IP: 165.243.0.0 -- 165.244.255.255
IP: 165.246.0.0/16
IP: 166.79.0.0/16
IP: 166.103.0.0 -- 166.104.255.255
IP: 166.125.0.0/16
IP: 168.78.0.0/16
IP: 168.115.0.0/16
IP: 168.126.0.0/16
IP: 168.131.0.0/16
IP: 168.154.0.0/16
IP: 168.188.0.0/16
IP: 168.219.0.0/16
IP: 168.248.0.0/15
IP: 169.140.0.0/16
IP: 169.208.0.0/12
IP: 192.5.90.0/24
IP: 192.100.2.0/24
IP: 192.104.15.0/24
IP: 192.132.15.0/24
IP: 192.132.247.0 -- 192.132.251.255
IP: 192.195.39.0 -- 192.195.40.255
IP: 192.203.138.0 -- 192.203.146.255
IP: 192.245.249.0 -- 192.245.251.255
IP: 192.249.16.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 17:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21552 (0x5430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 3 15:11:34 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.134.0.0/16
129.254.0.0/16
134.75.0.0/16
137.68.0.0/16
139.150.0.0/16
143.248.0.0/16
147.6.0.0/16
147.43.0.0/16
147.46.0.0/15
152.99.0.0/16
152.149.0.0/16
155.230.0.0/16
156.147.0.0/16
157.66.64.0/23
157.197.0.0/16
158.44.0.0/16
161.122.0.0/16
164.124.0.0/15
165.132.0.0/15
165.141.0.0/16
165.186.0.0/16
165.194.0.0/16
165.213.0.0/16
165.229.0.0/16
165.243.0.0-165.244.255.255
165.246.0.0/16
166.79.0.0/16
166.103.0.0-166.104.255.255
166.125.0.0/16
168.78.0.0/16
168.115.0.0/16
168.126.0.0/16
168.131.0.0/16
168.154.0.0/16
168.188.0.0/16
168.219.0.0/16
168.248.0.0/15
169.140.0.0/16
169.208.0.0/12
192.5.90.0/24
192.100.2.0/24
192.104.15.0/24
192.132.15.0/24
192.132.247.0-192.132.251.255
192.195.39.0-192.195.40.255
192.203.138.0-192.203.146.255
192.245.249.0-192.245.251.255
192.249.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:1c:ec:ee:7c:19:0f:cc:39:b2:4f:98:45:7c:01:3a:9b:0d:
4d:2b:47:4d:4c:bf:e1:25:3c:c3:bc:38:7e:32:3f:6e:15:0e:
ad:32:d3:08:7a:82:3a:38:3f:53:37:df:6c:2d:93:7c:13:fa:
49:1f:97:a5:99:36:59:66:1c:12:d1:c8:d4:61:65:30:d8:26:
b8:c2:a0:3a:9e:fe:a8:14:15:89:a2:ee:9a:de:33:fd:b3:b1:
bc:92:9a:ed:ce:f2:68:9c:05:bf:af:aa:c7:bb:63:7a:65:79:
a4:a9:c9:08:a0:9a:2b:ba:4a:55:a1:e4:54:67:95:f7:f9:9a:
bd:13:bc:4b:ad:03:be:11:b1:02:87:46:d5:f7:4a:3a:9a:5a:
1c:71:7a:1b:59:92:4b:e8:74:84:5e:c3:73:5e:b7:c6:52:13:
d6:2c:5d:22:f1:36:3e:56:50:0d:1b:5f:c8:0b:3e:3c:06:8d:
20:63:11:b5:e9:7f:83:ca:c7:89:e7:90:ff:b6:2b:c0:29:80:
dc:3c:65:ef:14:94:09:53:3f:50:12:1c:d3:c5:c4:75:26:4f:
8f:61:cc:32:10:90:b0:06:eb:c6:39:7d:b2:4d:39:bb:d0:7f:
25:bd:cf:7b:e3:e1:98:c2:20:ab:15:0f:cb:11:74:cc:44:5e:
92:c1:d9:76
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgICVDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNDAzMTUxMTM0WhcNMjQwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0OUYzRTExMC8GA1UEBRMoQkYwRTZGNEVFMEUxN0RERThDNEEyNEJG
ODk3RDE5Qjg3QUE1NzU5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APNfuGXZVyRW4rgidZinVbIKsnLHF1l8dTWgXaoE6OabmwkOJ14TOCV6FIskx9VB
lDw6jmxy8rgsDz7JL8VTmqbYIWH/uDEn4+x7fNgyghZ9aaStsUwGDMFn+LaQY4KH
elk5DuHbPB5GCx1vKtRsYdnW/FwAxREoN50YMpq2Va8SaFNaCkCFztbwc1tIOoSa
ww07IIAqvGtChWo/SjLwaDfzoSh3Cw/jDSxwx39o7FFBiEMxdgvBaNFlsnODi8DJ
d2xl0dHdAh9kjAYk7pERmx9beWc2PuSPZb8kq+/bJsO9TabngjejSErUgT5TiVgT
0/CL8p/prfxz0FeXXCLQV1UCAwEAAaOCBB8wggQbMB0GA1UdDgQWBBS/Dm9O4OF9
3oxKJL+JfRm4eqV1nzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvOUE4NUJCNTAxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ5RjNFLzlBODVCQjUwMUQ4MjExRTJCQzY0MTdENzA4QjAyQ0QyL3Z3NXZUdURo
ZmQ2TVNpU19pWDBadUhxbGRaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCCAUkGCCsGAQUFBwEHAQH/BIIB
ODCCATQwggEwBAIAATCCASgDAwCAhgMDAIH+AwMAhksDAwCJRAMDAIuWAwMAj/gD
AwCTBgMDAJMrAwMBky4DAwCYYwMDAJiVAwMAm+YDAwCckwMEAZ1CQAMDAJ3FAwMA
niwDAwChegMDAaR8AwMBpYQDAwCljQMDAKW6AwMApcIDAwCl1QMDAKXlMAoDAwCl
8wMDAKX0AwMApfYDAwCmTzAKAwMApmcDAwCmaAMDAKZ9AwMAqE4DAwCocwMDAKh+
AwMAqIMDAwComgMDAKi8AwMAqNsDAwGo+AMDAKmMAwMEqdADBADABVoDBADAZAID
BADAaA8DBADAhA8wDAMEAMCE9wMEAsCE+DAMAwQAwMMnAwQAwMMoMAwDBAHAy4oD
BADAy5IwDAMEAMD1+QMEAsD1+AMEBMD5EDANBgkqhkiG9w0BAQsFAAOCAQEArhzs
7nwZD8w5sk+YRXwBOpsNTStHTUy/4SU8w7w4fjI/bhUOrTLTCHqCOjg/UzffbC2T
fBP6SR+XpZk2WWYcEtHI1GFlMNgmuMKgOp7+qBQViaLumt4z/bOxvJKa7c7yaJwF
v6+qx7tjemV5pKnJCKCaK7pKVaHkVGeV9/mavRO8S60DvhGxAodG1fdKOppaHHF6
G1mSS+h0hF7Dc163xlIT1ixdIvE2PlZQDRtfyAs+PAaNIGMRtel/g8rHieeQ/7Yr
wCmA3Dxl7xSUCVM/UBIc08XEdSZPj2HMMhCQsAbrxjl9sk05u9B/Jb3Pe+PhmMIg
qxUPyxF0zEReksHZdg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 20:27:06 2024 by rpki-client on console-fra.rpki-client.org