Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer
File: w373yMNE0xhYKbwsuZbIlKqoDvM.cer (raw, json)
Hash identifier: 7jOOjzJafLLVoSEuC2wsnFr03owIxEAUhqeANzOaP7o=
Subject key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A91
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Sep 2024 07:00:27 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23185 (0x5a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 5 07:00:27 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:2f:cf:a2:43:4d:2d:13:06:93:fe:2a:c5:
89:5d:c7:fe:1d:d2:59:c1:f9:fe:a1:63:9c:82:5c:
4b:4d:1c:da:de:bf:28:de:83:99:0a:62:45:ac:8a:
eb:20:b7:dd:b5:33:5d:46:dc:e8:cb:6c:8b:07:79:
77:6a:b2:a9:b2:ab:13:69:1e:4d:ab:1a:cf:45:16:
06:4d:c4:7f:96:5a:38:7e:15:5c:4f:44:70:b5:5f:
9c:87:6a:f0:99:da:9c:80:2f:61:2f:23:33:2f:13:
9d:57:9d:1e:37:ea:8b:7c:c0:c4:74:4f:04:e2:35:
bf:6c:85:29:36:02:60:1b:cf:55:46:b6:1c:7d:fd:
53:7c:3b:59:70:86:35:63:79:46:6e:a5:e9:75:02:
ec:dd:76:27:bb:10:3f:e6:12:ca:df:d4:d8:12:13:
8a:de:1e:73:68:ba:d9:21:64:ca:d2:fa:d1:c6:92:
d1:db:63:52:8e:7c:e7:34:89:26:7c:b5:30:2c:6d:
c0:da:e7:92:44:52:e7:a1:c1:bb:e1:10:1c:0f:4a:
8a:50:34:99:34:e1:06:b7:1d:6e:85:aa:17:84:86:
11:eb:d5:71:43:f7:44:9b:70:c5:e3:0e:28:10:93:
cd:33:79:9e:f8:42:b1:c5:de:54:a1:b7:f7:58:59:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.120.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:b3:3a:6a:10:90:06:14:d9:d5:3e:60:3c:5f:7c:17:37:7e:
21:aa:6e:b6:43:6c:2a:80:4e:b9:53:36:15:cf:f3:54:09:2e:
8d:06:a4:55:73:fc:e3:c0:1f:7b:a1:8e:c5:cd:66:e6:0d:bb:
16:d0:7a:ad:eb:79:e7:11:09:e4:28:29:e9:7c:91:a3:2d:4e:
90:4b:92:19:99:1d:81:da:cd:0a:48:d5:d7:f4:13:8a:fe:bd:
6c:2d:25:9c:6a:96:eb:dc:a0:11:53:32:ba:09:c7:80:c2:ff:
2f:52:7f:16:7e:d0:6b:0f:0a:dc:21:0b:5e:0f:a8:77:24:de:
b2:78:2c:30:5d:be:a5:f8:2e:aa:a6:3d:ba:35:cd:f8:86:c8:
de:d4:17:64:80:69:2c:62:d3:83:84:bf:1f:26:67:c5:9a:37:
fa:ca:ed:c7:57:60:5d:5e:f2:e6:37:22:c5:01:66:23:7f:96:
db:9c:9d:ab:7a:e4:6b:6e:68:03:b1:f7:38:a8:61:0b:79:d9:
5e:9b:df:a8:8f:41:a7:86:04:e7:90:9a:25:72:fa:8b:c2:b2:
0a:6d:33:73:85:d5:76:dc:b2:f8:15:89:46:ce:99:fd:c5:8d:
20:41:7c:56:3b:1a:07:da:8e:c5:74:b0:04:60:12:cb:3c:d4:
e5:14:58:41
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwOTA1MDcwMDI3WhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyNzU2RDExMC8GA1UEBRMoQzM3RUY3QzhDMzQ0RDMxODU4MjlCQzJD
Qjk5NkM4OTRBQUE4MEVGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALsSL8+iQ00tEwaT/irFiV3H/h3SWcH5/qFjnIJcS00c2t6/KN6DmQpiRayK6yC3
3bUzXUbc6Mtsiwd5d2qyqbKrE2keTasaz0UWBk3Ef5ZaOH4VXE9EcLVfnIdq8Jna
nIAvYS8jMy8TnVedHjfqi3zAxHRPBOI1v2yFKTYCYBvPVUa2HH39U3w7WXCGNWN5
Rm6l6XUC7N12J7sQP+YSyt/U2BITit4ec2i62SFkytL60caS0dtjUo585zSJJny1
MCxtwNrnkkRS56HBu+EQHA9KilA0mTThBrcdboWqF4SGEevVcUP3RJtwxeMOKBCT
zTN5nvhCscXeVKG391hZ3dMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTDfvfIw0TT
GFgpvCy5lsiUqqgO8zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1NkQvODQyMjA2RDQ2QjU0MTFFRkI4QThBNjFBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI3NTZELzg0MjIwNkQ0NkI1NDExRUZCOEE4QTYxQUM0RjlBRTAyL3czNzN5TU5F
MHhoWUtid3N1WmJJbEtxb0R2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAeeDANBgkqhkiG9w0BAQsFAAOCAQEAb7M6ahCQBhTZ1T5gPF98
Fzd+IaputkNsKoBOuVM2Fc/zVAkujQakVXP848Afe6GOxc1m5g27FtB6ret55xEJ
5Cgp6XyRoy1OkEuSGZkdgdrNCkjV1/QTiv69bC0lnGqW69ygEVMyugnHgML/L1J/
Fn7Qaw8K3CELXg+odyTesngsMF2+pfguqqY9ujXN+IbI3tQXZIBpLGLTg4S/HyZn
xZo3+srtx1dgXV7y5jcixQFmI3+W25ydq3rka25oA7H3OKhhC3nZXpvfqI9Bp4YE
55CaJXL6i8KyCm0zc4XVdtyy+BWJRs6Z/cWNIEF8VjsaB9qOxXSwBGASyzzU5RRY
QQ==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:01 2024 by rpki-client on console-ams.rpki-client.org