Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
File: QhgvX3GliYTOiFmuYKTKynP-g2E.cer (raw, json)
Hash identifier: LjjAp6EblEght92BNKJeUBrJDyIMtv90l/+TojTj9q0=
Subject key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021822
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 00:02:17 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.99.168.0/24
IP: 2401:b140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137250 (0x21822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 00:02:17 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:53:a5:03:81:3b:66:6a:16:72:43:d8:c2:
45:15:8a:bb:93:ff:fb:28:8d:ad:0c:2c:cf:c3:97:
e5:fb:f3:47:7e:4a:66:24:14:fe:5e:9e:ef:87:6e:
b1:b5:4e:fd:f2:37:3f:2b:52:38:52:26:9d:59:f9:
b6:34:65:da:e2:af:75:68:cd:fc:c5:d0:e8:f0:45:
ab:6b:f4:c3:d7:6e:29:43:a3:93:32:50:0f:2c:f0:
e9:5d:d6:b1:cc:01:2d:23:9e:74:dc:d5:eb:3b:02:
cb:eb:19:34:32:f9:3d:6e:24:83:ec:9e:98:29:ed:
1d:bc:24:92:15:22:73:00:1d:3e:30:68:e5:13:28:
ca:1d:25:09:fd:98:ff:92:53:71:06:2f:91:10:3e:
04:90:28:97:ad:e0:dc:b2:e8:0a:67:25:ee:ae:f4:
10:05:69:7b:16:6a:e6:0d:10:a2:e1:d5:1e:b3:a9:
d4:f7:98:3e:ed:30:fd:f7:d0:c3:cc:eb:30:06:8d:
4b:cd:2f:c6:f3:34:07:70:0e:07:b6:4a:cb:5b:18:
04:e9:37:01:2b:11:e5:25:fe:a4:c5:ac:5f:95:0b:
ad:9c:36:31:06:fd:bf:1b:a4:29:04:23:e7:59:eb:
c2:12:d4:f8:e4:30:c8:01:57:99:cb:80:51:39:ac:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.168.0/24
IPv6:
2401:b140::/32
Signature Algorithm: sha256WithRSAEncryption
1a:b0:ef:c5:53:c3:9b:c1:26:e6:99:80:f2:5b:e8:6c:48:f9:
71:82:a0:44:2f:23:4d:a9:b8:2b:be:3f:2d:2d:eb:87:00:52:
e8:aa:39:88:5b:d0:c8:e7:e4:2f:cd:57:58:04:b1:3a:6f:40:
bf:d6:40:a3:bf:e2:6b:a5:76:1b:42:9f:56:e1:81:51:bd:a4:
48:b6:64:aa:4d:ac:db:65:7b:62:e1:36:44:d9:2b:0c:c3:15:
87:c9:ac:65:68:a2:d5:f7:71:7e:e4:6c:4d:30:d5:f6:fd:00:
64:4b:7d:a6:18:0d:82:b9:a3:c7:f0:ba:ad:10:4a:31:af:a5:
c0:08:22:31:7d:9a:7c:1c:ee:9a:d5:c4:11:f3:3f:7f:72:30:
d9:0f:15:f1:63:55:34:46:41:61:31:b6:f4:d9:ae:9d:56:e3:
4f:98:69:5e:95:86:95:2f:88:49:e1:10:72:3e:1e:46:b3:76:
72:f0:b6:8a:28:8d:a2:26:88:f8:2b:d4:9b:e7:e5:f4:cc:cf:
91:d3:4f:56:b4:21:e2:6e:85:63:29:b0:98:64:ad:98:e8:79:
09:34:35:23:59:d4:5c:76:e2:aa:85:62:58:e3:af:40:10:ec:
fc:17:aa:6f:b3:bf:3a:3b:a3:3d:3c:b4:09:09:93:c5:27:71:
19:e8:82:93
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAhgiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwMjAwMDIxN1oXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlB
RTYwQTRDQUNBNzNGRTgzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZwFOlA4E7ZmoWckPYwkUViruT//soja0MLM/Dl+X780d+SmYkFP5enu+HbrG1
Tv3yNz8rUjhSJp1Z+bY0Zdrir3VozfzF0OjwRatr9MPXbilDo5MyUA8s8Old1rHM
AS0jnnTc1es7AsvrGTQy+T1uJIPsnpgp7R28JJIVInMAHT4waOUTKModJQn9mP+S
U3EGL5EQPgSQKJet4Nyy6ApnJe6u9BAFaXsWauYNEKLh1R6zqdT3mD7tMP330MPM
6zAGjUvNL8bzNAdwDge2SstbGATpNwErEeUl/qTFrF+VC62cNjEG/b8bpCkEI+dZ
68IS1PjkMMgBV5nLgFE5rK13AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUQhgvX3Gl
iYTOiFmuYKTKynP+g2EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZFRjVFL0YzOERDRjhBMTA2QjExRThCOENBMDIwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNH
bGlZVE9pRm11WUtUS3luUC1nMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBABnY6gwDQQCAAIwBwMFACQBsUAwDQYJKoZIhvcNAQELBQADggEB
ABqw78VTw5vBJuaZgPJb6GxI+XGCoEQvI02puCu+Py0t64cAUuiqOYhb0Mjn5C/N
V1gEsTpvQL/WQKO/4muldhtCn1bhgVG9pEi2ZKpNrNtle2LhNkTZKwzDFYfJrGVo
otX3cX7kbE0w1fb9AGRLfaYYDYK5o8fwuq0QSjGvpcAIIjF9mnwc7prVxBHzP39y
MNkPFfFjVTRGQWExtvTZrp1W40+YaV6VhpUviEnhEHI+HkazdnLwtooojaImiPgr
1Jvn5fTMz5HTT1a0IeJuhWMpsJhkrZjoeQk0NSNZ1Fx24qqFYljjr0AQ7PwXqm+z
vzo7oz08tAkJk8UncRnogpM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:40 2024 by rpki-client on console-ams.rpki-client.org