Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
File: FYOTMKge2Jkgc6I4BMn1kFOPudI.cer (raw, json)
Hash identifier: 4UXNNA9YZHAabDYx7zouT/Kuh89gRyLoEGvSbxgBPYM=
Subject key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6330
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Mar 2025 14:55:43 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.20.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25392 (0x6330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 20 14:55:43 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9159B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:c6:df:e2:a6:fc:c3:86:20:4c:52:c0:dc:
aa:39:5f:f7:7c:46:9a:e5:55:6d:f6:fc:2e:90:3c:
ef:c4:fa:31:0b:5e:d3:5a:c9:67:3b:56:0c:7f:5f:
41:73:3d:a7:4a:44:7f:ff:da:f6:98:3c:e5:13:e1:
1b:ca:7b:ea:b9:36:a0:7b:ac:79:9d:97:2e:0d:d7:
7f:96:d5:c8:21:04:39:23:11:58:c7:99:b8:71:2e:
5f:db:bb:c9:64:0c:8f:77:8a:86:6a:89:02:24:da:
db:45:0a:4a:a1:7a:3e:14:68:55:68:70:da:0a:e2:
5e:6c:26:a5:22:2d:c1:47:12:f5:fd:78:ca:38:c5:
40:cb:37:92:07:83:1d:b0:4a:c7:28:f5:5f:77:08:
1c:76:6c:93:b9:7e:72:79:55:c0:04:7e:76:70:a0:
6b:4f:a6:86:f5:5d:c1:6a:81:84:fe:cc:89:e4:94:
38:62:6e:44:5f:17:52:5b:09:cd:04:9e:31:32:f5:
09:8c:43:d1:0f:10:85:e1:dc:39:c2:97:95:69:ae:
ab:dc:5a:b5:d5:6f:aa:22:f3:be:f5:db:13:48:77:
d2:1a:41:7c:ae:1c:9f:fa:59:59:24:a0:21:c7:23:
e0:ed:15:8a:68:c1:22:99:0e:e4:bb:f6:11:44:3d:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.74.0/23
Signature Algorithm: sha256WithRSAEncryption
04:90:b3:e2:56:09:77:ed:9f:23:ac:e0:91:d7:57:94:68:2c:
80:be:86:8c:68:b2:69:8b:0f:7e:01:ba:50:b5:5d:0a:b6:76:
c7:4a:d0:3a:52:bf:94:27:c8:47:ce:ae:45:02:c9:30:77:29:
b6:c0:14:c0:64:ab:b4:92:e7:28:4b:45:d0:6c:d2:8c:36:6c:
c5:da:bd:ca:b9:fb:ba:0e:da:b2:a8:dd:84:46:83:5a:47:32:
4f:a5:e4:0b:d5:80:64:02:57:ab:bc:34:0e:ad:da:22:75:da:
89:cc:47:23:c2:a9:e7:9e:ab:bb:12:23:0b:d1:fe:ec:3c:d3:
66:51:7b:7b:73:30:dc:e4:cf:ce:7e:f8:1b:a6:e5:50:43:a0:
b4:8e:ca:21:ac:8c:8b:4d:82:92:2c:c9:15:a5:33:59:77:80:
08:f6:e9:f5:c2:90:62:73:0d:47:9f:3b:67:9e:66:4e:e3:a0:
2c:13:dc:b0:de:34:61:b2:81:2b:7a:4d:05:59:95:82:a5:ff:
bb:fb:21:04:93:23:ae:25:bb:d1:72:dd:ea:57:04:f3:fe:18:
e3:62:0a:2f:dc:66:1c:e5:e6:c3:a2:e4:62:85:b4:6c:77:d2:
2a:75:c6:49:15:c0:af:dd:45:35:0b:0e:8f:03:80:e1:d3:f3:
e1:99:84:93
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMzIwMTQ1NTQzWhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1OUI2RjExMC8GA1UEBRMoMTU4MzkzMzBBODFFRDg5OTIwNzNBMjM4
MDRDOUY1OTA1MzhGQjlEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALzVxt/ipvzDhiBMUsDcqjlf93xGmuVVbfb8LpA878T6MQte01rJZztWDH9fQXM9
p0pEf//a9pg85RPhG8p76rk2oHuseZ2XLg3Xf5bVyCEEOSMRWMeZuHEuX9u7yWQM
j3eKhmqJAiTa20UKSqF6PhRoVWhw2griXmwmpSItwUcS9f14yjjFQMs3kgeDHbBK
xyj1X3cIHHZsk7l+cnlVwAR+dnCga0+mhvVdwWqBhP7MieSUOGJuRF8XUlsJzQSe
MTL1CYxD0Q8QheHcOcKXlWmuq9xatdVvqiLzvvXbE0h30hpBfK4cn/pZWSSgIccj
4O0VimjBIpkO5Lv2EUQ9ufkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQVg5MwqB7Y
mSBzojgEyfWQU4+50jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTlCNkYvMkFENUY2RDhEMDlDMTFFRTgwQUI4RDdFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU5QjZGLzJBRDVGNkQ4RDA5QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dl
MkprZ2M2STRCTW4xa0ZPUHVkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0USjANBgkqhkiG9w0BAQsFAAOCAQEABJCz4lYJd+2fI6zgkddX
lGgsgL6GjGiyaYsPfgG6ULVdCrZ2x0rQOlK/lCfIR86uRQLJMHcptsAUwGSrtJLn
KEtF0GzSjDZsxdq9yrn7ug7asqjdhEaDWkcyT6XkC9WAZAJXq7w0Dq3aInXaicxH
I8Kp556ruxIjC9H+7DzTZlF7e3Mw3OTPzn74G6blUEOgtI7KIayMi02CkizJFaUz
WXeACPbp9cKQYnMNR587Z55mTuOgLBPcsN40YbKBK3pNBVmVgqX/u/shBJMjriW7
0XLd6lcE8/4Y42IKL9xmHOXmw6LkYoW0bHfSKnXGSRXAr91FNQsOjwOA4dPz4ZmE
kw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:51:21 2025 by rpki-client