Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer
File: wvuur6_7tA2qpRworxHolYOxPwo.cer (raw, json)
Hash identifier: PLBebaxTdaxFrDJIlmyxiaRWOUKNeGBQ/F+cbFYzEKE=
Subject key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5DDE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 06:54:17 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.191.200.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24030 (0x5dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 14 06:54:17 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:d5:ef:fc:57:78:d5:33:f2:b4:e8:f6:52:
aa:bb:1d:2b:8f:7b:57:6e:be:4f:3d:64:4f:e1:2a:
e9:cb:f4:ec:3a:62:37:7f:28:59:36:9c:05:3e:97:
02:91:18:d5:70:33:a5:41:d7:af:d0:80:87:3b:ab:
76:e3:af:91:80:81:8e:a0:5c:4f:19:c9:35:69:8f:
c6:a3:cc:67:2a:2f:87:e1:10:c2:cf:35:af:8c:4f:
dc:f2:46:e0:38:fd:32:d4:13:75:f4:6b:d6:ba:39:
3e:1c:81:e2:70:07:5c:ee:88:07:d2:a4:66:6a:fb:
fb:7e:b3:03:41:fd:21:e7:0e:c8:fd:15:47:47:38:
89:3c:9a:a1:59:95:84:2e:13:53:c1:02:20:de:9b:
a0:4c:ae:48:b3:f3:51:74:4e:fa:6b:62:7a:74:c2:
28:d5:1f:70:2e:c6:ee:6d:7e:d6:3b:28:fc:eb:47:
f4:d9:5f:8b:98:b3:1f:01:e5:0b:4b:ff:e0:ad:93:
67:76:c9:40:a8:02:99:6f:1f:be:33:75:6c:38:e9:
6f:ce:aa:9c:41:6c:bb:a3:fe:bc:de:f7:07:e4:4d:
8d:80:f0:ca:f5:00:b7:fc:dc:3d:7a:1c:b4:1b:b2:
b9:4f:73:57:52:29:3b:b7:72:f7:63:58:cc:5b:17:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2d:90:3c:c9:f0:1e:5d:5d:86:ca:aa:e7:99:02:5a:26:fd:
e7:1b:30:88:61:f3:f8:2e:fd:12:19:fb:b2:f4:fc:dd:08:f1:
4d:31:f9:be:44:99:86:7b:e0:73:c0:c3:56:64:6f:d0:24:3f:
33:a8:07:e7:79:29:d0:29:f9:3d:b8:7e:62:27:b8:ad:68:79:
65:f8:fe:66:3d:2b:8c:94:f3:b2:13:a4:4c:74:ef:1e:04:f6:
0f:34:14:5d:1d:c3:61:05:26:8f:ca:76:e7:d3:9a:bc:51:ef:
9b:73:57:c4:53:46:3a:cc:07:7b:3a:4d:72:bf:76:95:4c:e9:
51:d9:e1:a5:8c:91:c5:48:6d:f8:a7:7c:ad:a8:0a:a6:86:ac:
be:73:25:7a:1b:13:79:d7:4f:5e:9d:7f:ad:9a:37:56:58:ac:
ba:d8:1f:1d:bd:4c:1b:30:86:14:a3:06:76:aa:ff:2c:df:91:
a1:7f:9f:c4:a0:28:a8:db:11:35:d1:6a:61:1d:f6:fc:70:1e:
2c:ab:f0:fe:8e:a4:4f:72:76:7a:bc:d7:0f:75:39:16:0b:bd:
55:e6:37:2e:f7:46:c0:c3:43:75:e2:29:d7:ad:32:e8:81:25:
7c:1d:22:1f:b1:04:83:96:ef:be:2e:ec:a8:dc:1f:f9:7e:8e:
77:7f:63:9f
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMTE0MDY1NDE3WhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2MTJGRTExMC8GA1UEBRMoQzJGQkFFQUZBRkZCQjQwREFBQTUxQzI4
QUYxMUU4OTU4M0IxM0YwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKhY1e/8V3jVM/K06PZSqrsdK497V26+Tz1kT+Eq6cv07DpiN38oWTacBT6XApEY
1XAzpUHXr9CAhzurduOvkYCBjqBcTxnJNWmPxqPMZyovh+EQws81r4xP3PJG4Dj9
MtQTdfRr1ro5PhyB4nAHXO6IB9KkZmr7+36zA0H9IecOyP0VR0c4iTyaoVmVhC4T
U8ECIN6boEyuSLPzUXRO+mtienTCKNUfcC7G7m1+1jso/OtH9Nlfi5izHwHlC0v/
4K2TZ3bJQKgCmW8fvjN1bDjpb86qnEFsu6P+vN73B+RNjYDwyvUAt/zcPXoctBuy
uU9zV1IpO7dy92NYzFsXZZsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTC+66vr/u0
DaqlHCivEeiVg7E/CjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjEyRkUvNDE2Qzg4NDBBMjU1MTFFRkIyQ0E3ODJBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYxMkZFLzQxNkM4ODQwQTI1NTExRUZCMkNBNzgyQUM0RjlBRTAyL3d2dXVyNl83
dEEycXBSd29yeEhvbFlPeFB3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC/yDANBgkqhkiG9w0BAQsFAAOCAQEApS2QPMnwHl1dhsqq55kC
Wib95xswiGHz+C79Ehn7svT83QjxTTH5vkSZhnvgc8DDVmRv0CQ/M6gH53kp0Cn5
Pbh+Yie4rWh5Zfj+Zj0rjJTzshOkTHTvHgT2DzQUXR3DYQUmj8p259OavFHvm3NX
xFNGOswHezpNcr92lUzpUdnhpYyRxUht+Kd8ragKpoasvnMlehsTeddPXp1/rZo3
VlisutgfHb1MGzCGFKMGdqr/LN+RoX+fxKAoqNsRNdFqYR32/HAeLKvw/o6kT3J2
erzXD3U5Fgu9VeY3LvdGwMNDdeIp160y6IElfB0iH7EEg5bvvi7sqNwf+X6Od39j
nw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org