Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer
File: CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer (raw, json)
Hash identifier: 66SXRrbI8ovFR1JSfkYkuQkp2ZQvrzZFCotKYY04Smo=
Subject key identifier: 09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AA2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Jun 2023 18:12:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.213.204.0/22
IP: 2404:ae80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109102 (0x1aa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 14 18:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91D49BC/serialNumber=09C32AB54B84A39B57C14D61BC639530E7B5BD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:a5:ce:f2:c9:7f:1b:9a:68:32:c1:4c:7c:
5b:f2:03:01:a5:0a:78:16:e7:f8:18:05:f3:e6:4e:
f5:8d:2c:69:f6:e7:ea:2d:43:34:ad:e3:41:c4:0a:
05:1a:0a:f0:ac:f2:a4:00:81:bb:7b:4b:1e:1b:f7:
4c:da:03:c8:af:f0:e2:77:d4:1b:2a:f6:ef:47:47:
89:7a:61:fc:cc:b3:2a:34:a5:af:c3:e1:b0:93:30:
33:4c:55:e4:74:c5:9f:cf:e4:fe:ce:46:cf:0d:85:
c7:dd:3f:5a:06:0e:6b:27:21:1e:90:f2:ff:ae:5f:
a9:c6:07:39:50:5d:13:4b:63:80:d6:d2:d0:11:c0:
57:8b:fe:32:1d:5b:35:3b:a8:a4:29:cf:29:69:ae:
67:c7:f5:ad:a5:4c:f8:9d:9b:41:1c:c3:03:f2:ea:
94:62:4f:b8:bc:d2:a6:b3:f1:ed:73:34:17:c0:71:
9a:17:a1:88:78:47:3b:9b:b6:be:99:4a:96:67:81:
9c:d8:3f:8b:a9:cc:3c:13:b6:cd:20:f0:5e:f4:02:
c1:16:2c:48:2c:d1:8c:b8:01:68:90:9c:91:72:d0:
2d:95:3f:4d:40:c8:fd:ca:4e:0c:c2:88:de:29:74:
ac:ea:29:18:0a:ff:97:69:11:82:8a:90:c1:74:68:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.204.0/22
IPv6:
2404:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
d6:d8:d3:7b:03:2f:84:74:97:56:4b:75:22:58:27:32:4e:c4:
4d:6c:de:57:93:ee:08:f5:4b:af:0e:18:d3:3f:cf:fa:79:d3:
f6:c0:2f:e2:7f:42:09:21:46:f5:25:c3:f2:82:b3:db:30:10:
eb:7a:13:fc:c8:95:2f:53:50:9b:96:a5:17:91:da:e6:8e:de:
4f:ec:88:22:7e:fe:92:0d:6d:84:7f:fa:96:d4:25:fc:b0:78:
34:92:6a:75:2a:44:8c:2d:45:48:00:3e:26:8c:60:a7:6b:cb:
49:01:4b:29:c3:bf:54:c3:8a:a5:7e:47:8d:9f:74:bc:fb:b3:
4d:d7:aa:e2:de:ed:6e:c0:42:53:46:65:9b:f7:c0:36:04:bc:
93:a3:a2:0f:37:e6:fa:44:73:65:87:d5:14:81:f1:da:0f:86:
5f:ab:b8:f6:b9:4e:9b:47:c4:69:f5:3d:f5:bf:8f:35:6a:29:
f4:3e:a6:38:5f:fd:ab:53:0b:8b:16:c8:0e:2b:98:14:eb:a9:
85:09:37:9e:19:e3:92:55:98:90:16:0f:69:32:73:06:97:c3:
5f:d1:91:78:67:78:5e:94:2c:6c:70:c5:d6:f0:4d:9c:f8:89:
84:85:b9:f7:fe:61:0b:eb:ac:95:fa:7f:d8:40:b9:d2:12:1f:
22:f7:14:c0
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAaouMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYxNDE4MTIzNloXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDQ5QkMxMTAvBgNVBAUTKDA5QzMyQUI1NEI4NEEzOUI1N0MxNEQ2
MUJDNjM5NTMwRTdCNUJEMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNv6XO8sl/G5poMsFMfFvyAwGlCngW5/gYBfPmTvWNLGn25+otQzSt40HECgUa
CvCs8qQAgbt7Sx4b90zaA8iv8OJ31Bsq9u9HR4l6YfzMsyo0pa/D4bCTMDNMVeR0
xZ/P5P7ORs8NhcfdP1oGDmsnIR6Q8v+uX6nGBzlQXRNLY4DW0tARwFeL/jIdWzU7
qKQpzylprmfH9a2lTPidm0EcwwPy6pRiT7i80qaz8e1zNBfAcZoXoYh4Rzubtr6Z
SpZngZzYP4upzDwTts0g8F70AsEWLEgs0Yy4AWiQnJFy0C2VP01AyP3KTgzCiN4p
dKzqKRgK/5dpEYKKkMF0aKIDAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUCcMqtUuE
o5tXwU1hvGOVMOe1vRwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ0OUJDLzg3RjVFMTY2M0YxMDExRTk4MTEyNjAxOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENDlCQy84N0Y1RTE2NjNGMTAxMUU5ODExMjYwMThDNEY5QUUwMi9DY01xdFV1
RW81dFh3VTFodkdPVk1PZTF2UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJn1cwwDQQCAAIwBwMFACQEroAwDQYJKoZIhvcNAQELBQADggEB
ANbY03sDL4R0l1ZLdSJYJzJOxE1s3leT7gj1S68OGNM/z/p50/bAL+J/QgkhRvUl
w/KCs9swEOt6E/zIlS9TUJuWpReR2uaO3k/siCJ+/pINbYR/+pbUJfyweDSSanUq
RIwtRUgAPiaMYKdry0kBSynDv1TDiqV+R42fdLz7s03XquLe7W7AQlNGZZv3wDYE
vJOjog835vpEc2WH1RSB8doPhl+ruPa5TptHxGn1PfW/jzVqKfQ+pjhf/atTC4sW
yA4rmBTrqYUJN54Z45JVmJAWD2kycwaXw1/RkXhneF6ULGxwxdbwTZz4iYSFuff+
YQvrrJX6f9hAudISHyL3FMA=
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:44 2024 by rpki-client on console-fra.rpki-client.org