Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
File: zuc6ldXM7gYufV66G1oScFLhJTg.cer (raw, json)
Hash identifier: RTjaKLMwGco1aSzDzAdIH84Vkkb+57JxJUcJM9tPkQw=
Subject key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A17
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Aug 2024 02:26:53 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23063 (0x5a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 27 02:26:53 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:e1:da:5e:3f:54:60:ab:22:b2:3c:53:13:
85:ab:f0:5c:ef:81:28:41:30:0c:ca:61:29:49:59:
9a:c6:0d:bf:9c:9d:08:2f:ab:70:cd:27:61:0d:a1:
37:4b:d8:b8:47:6c:bf:6f:d6:d1:4d:d7:17:2f:97:
f7:c1:91:b7:55:c8:55:b0:13:2c:21:c2:bd:ed:67:
07:a3:1b:78:7c:a0:d3:c4:e7:10:b2:a0:21:8f:ba:
db:f9:10:e3:32:fa:f0:43:2b:64:0e:2e:42:89:b4:
40:98:cb:40:91:d1:98:ea:3f:71:4f:0a:8d:29:40:
97:56:6e:55:9b:3c:dd:38:38:1b:41:0c:c0:2c:06:
ff:6a:1f:f2:a9:75:c6:c7:59:70:2c:9b:2b:20:f1:
2b:3e:f9:70:de:7e:ca:47:5d:12:5b:15:0b:ef:27:
90:d0:95:56:3c:1f:4a:94:75:a2:f0:2a:e4:5b:00:
8a:59:0c:2d:69:47:94:40:38:73:66:54:3c:5f:9a:
1b:02:c2:5a:8d:47:15:94:21:fb:94:65:38:dd:3d:
9b:28:3e:f9:84:f6:4a:1a:6c:f8:b2:5e:28:bc:87:
d6:ec:16:ee:48:15:ce:a4:07:b3:f0:8b:b7:9a:be:
fb:48:ec:13:37:e6:36:ba:ed:2f:cf:ef:fb:d7:b0:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:52:31:3f:72:70:60:64:b6:04:79:48:f6:9e:17:fb:89:14:
8d:5a:eb:a9:dd:21:24:a2:5b:83:e9:2b:c2:34:d9:3a:35:d6:
dd:dd:79:ba:61:c5:79:5d:81:6f:d2:57:63:36:df:4f:b1:47:
b5:28:87:4d:31:3c:20:62:f2:47:36:73:89:e6:07:1b:97:09:
9f:8a:c7:e3:13:25:c3:21:5f:65:0c:af:e1:f1:03:b0:22:6a:
dc:15:28:b7:69:57:57:65:be:d3:b5:73:cc:77:31:7d:82:6c:
23:ee:65:2c:b2:63:84:f1:25:75:f2:d0:81:8a:5d:f4:29:55:
29:c6:4a:fa:e4:3c:4d:d6:ee:14:05:c4:4b:23:78:87:76:25:
c8:41:14:7b:33:2c:ae:4b:fc:4c:ab:7c:1b:9f:74:11:64:a3:
b5:3b:a6:9a:c8:71:3a:f7:c8:eb:e5:8c:96:58:7b:37:59:5c:
a6:e1:02:6e:3a:54:07:a0:51:6b:7c:51:5b:78:88:d9:c0:6e:
59:f1:de:0f:84:d9:b2:ad:ab:87:ca:13:55:57:26:a0:a4:9a:
27:19:2e:f6:64:74:e0:65:a7:4a:41:cc:52:c6:fc:83:4a:93:
b2:70:70:eb:f9:f8:0f:5f:b0:98:79:bb:53:ae:f6:44:ce:c5:
d5:8e:ae:d2
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwODI3MDIyNjUzWhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCNEMxQjExMC8GA1UEBRMoQ0VFNzNBOTVENUNDRUUwNjJFN0Q1RUJB
MUI1QTEyNzA1MkUxMjUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMd44dpeP1RgqyKyPFMThavwXO+BKEEwDMphKUlZmsYNv5ydCC+rcM0nYQ2hN0vY
uEdsv2/W0U3XFy+X98GRt1XIVbATLCHCve1nB6MbeHyg08TnELKgIY+62/kQ4zL6
8EMrZA4uQom0QJjLQJHRmOo/cU8KjSlAl1ZuVZs83Tg4G0EMwCwG/2of8ql1xsdZ
cCybKyDxKz75cN5+ykddElsVC+8nkNCVVjwfSpR1ovAq5FsAilkMLWlHlEA4c2ZU
PF+aGwLCWo1HFZQh+5RlON09myg++YT2Shps+LJeKLyH1uwW7kgVzqQHs/CLt5q+
+0jsEzfmNrrtL8/v+9ew+68CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTO5zqV1czu
Bi59XrobWhJwUuElODAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjRDMUIvQ0YzNzM1RDA2NDFCMTFFRjk4OTE1NDdGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI0QzFCL0NGMzczNUQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL3p1YzZsZFhN
N2dZdWZWNjZHMW9TY0ZMaEpUZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAeTDANBgkqhkiG9w0BAQsFAAOCAQEAS1IxP3JwYGS2BHlI9p4X
+4kUjVrrqd0hJKJbg+krwjTZOjXW3d15umHFeV2Bb9JXYzbfT7FHtSiHTTE8IGLy
RzZzieYHG5cJn4rH4xMlwyFfZQyv4fEDsCJq3BUot2lXV2W+07VzzHcxfYJsI+5l
LLJjhPEldfLQgYpd9ClVKcZK+uQ8TdbuFAXESyN4h3YlyEEUezMsrkv8TKt8G590
EWSjtTummshxOvfI6+WMllh7N1lcpuECbjpUB6BRa3xRW3iI2cBuWfHeD4TZsq2r
h8oTVVcmoKSaJxku9mR04GWnSkHMUsb8g0qTsnBw6/n4D1+wmHm7U672RM7F1Y6u
0g==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:02 2024 by rpki-client on console-ams.rpki-client.org