Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
File: M-VCXQNo-C_4W5uEf0EjitWNTlA.cer (raw, json)
Hash identifier: C9RvTHcd3uhklMBtfrpwYJRSN97wTj967ltyzktoGgw=
Subject key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 614A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jan 2025 20:11:45 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.22.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24906 (0x614a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 21 20:11:45 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91CFD5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:c3:fd:e2:2e:6b:19:c6:66:9e:03:4b:7d:
25:43:a1:6a:20:b4:dd:90:f7:fa:0b:fb:4a:78:42:
22:31:44:9a:16:36:d3:56:22:94:64:86:55:f9:04:
60:a9:14:1d:67:45:77:2f:dc:1d:61:86:7e:98:cf:
ab:9d:e1:13:ee:2d:8f:69:9f:c5:15:3b:87:f6:6d:
25:46:e1:dd:ca:15:0a:ac:59:75:67:62:d8:17:d7:
af:c2:a7:7c:0d:94:47:d4:a2:d9:35:d3:34:46:55:
26:12:80:df:f2:c3:5e:25:a7:7f:a2:a3:e2:ef:9d:
17:4a:cf:74:10:72:b2:ff:6d:e6:a8:fd:f5:d0:d8:
1d:7d:82:0f:3d:db:57:93:bc:c9:6c:5f:d9:5d:4b:
3b:f3:7f:23:ca:38:22:17:53:cb:32:f9:bd:04:a1:
73:e1:5e:8f:02:ad:93:83:10:b2:3f:78:02:63:71:
9d:be:fb:62:1d:56:dd:cc:22:26:c5:1d:1d:ea:bf:
86:47:86:ec:0a:d9:b2:d2:59:d8:76:8a:07:bd:c6:
8d:12:c6:49:d7:2e:f2:70:da:36:87:41:be:0f:f8:
0e:47:c6:13:26:a7:ca:e7:62:9c:35:ac:20:64:18:
d5:7f:5c:d7:77:c1:a9:30:37:a9:65:a8:32:69:e8:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:25:2a:44:1a:a5:cf:02:1c:10:ea:a7:d1:6f:fa:28:e4:7b:
4a:f5:be:12:c7:84:8e:b0:e2:41:06:47:f0:bf:17:de:c3:51:
da:b2:10:15:5b:eb:a0:e5:e6:f1:99:fe:5b:90:c0:9e:74:ff:
94:1f:13:cc:07:d2:89:8d:ab:cc:9c:9e:62:7b:d2:23:00:ac:
f1:9e:3f:cd:85:f6:6c:7e:b6:bf:19:d5:51:ac:a9:d7:01:59:
7c:3e:a4:0c:50:6a:f8:34:d7:ff:89:3d:49:2d:64:27:57:bb:
43:bf:32:82:d2:9f:28:d1:ba:c5:c4:5b:30:21:0b:0b:58:64:
ec:50:8d:36:86:32:10:5e:cb:2a:2c:0f:28:5a:2d:92:90:b8:
39:60:e4:dd:af:8b:8c:b1:cd:c1:48:bd:4f:c2:e0:1f:e9:08:
b0:fc:01:a3:ab:9a:9f:5a:35:87:f6:7a:d6:03:f9:bf:b4:ce:
e4:16:81:01:df:9d:d2:48:06:6c:75:d5:2a:fe:10:0a:80:a1:
a1:2c:91:d1:ff:22:a0:f9:2f:a0:a5:f6:f9:30:41:f9:39:e2:
f8:56:1e:ec:b1:07:a5:02:db:2f:3f:ab:59:d9:d3:79:8e:01:
66:fd:e3:cf:bb:85:bb:da:c6:68:4b:a0:40:4a:0e:ff:5d:9d:
19:41:f8:18
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTIxMjAxMTQ1WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDRkQ1QTExMC8GA1UEBRMoMzNFNTQyNUQwMzY4RjgyRkY4NUI5Qjg0
N0Y0MTIzOEFENThENEU1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALuuw/3iLmsZxmaeA0t9JUOhaiC03ZD3+gv7SnhCIjFEmhY201YilGSGVfkEYKkU
HWdFdy/cHWGGfpjPq53hE+4tj2mfxRU7h/ZtJUbh3coVCqxZdWdi2BfXr8KnfA2U
R9Si2TXTNEZVJhKA3/LDXiWnf6Kj4u+dF0rPdBBysv9t5qj99dDYHX2CDz3bV5O8
yWxf2V1LO/N/I8o4IhdTyzL5vQShc+FejwKtk4MQsj94AmNxnb77Yh1W3cwiJsUd
Heq/hkeG7ArZstJZ2HaKB73GjRLGSdcu8nDaNodBvg/4DkfGEyanyudinDWsIGQY
1X9c13fBqTA3qWWoMmnoQ1sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQz5UJdA2j4
L/hbm4R/QSOK1Y1OUDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZENUEvNUZCN0RDMDhCOUFBMTFFRUIwRENEODM0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNGRDVBLzVGQjdEQzA4QjlBQTExRUVCMERDRDgzNEM0RjlBRTAyL00tVkNYUU5v
LUNfNFc1dUVmMEVqaXRXTlRsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0PFjANBgkqhkiG9w0BAQsFAAOCAQEAnSUqRBqlzwIcEOqn0W/6
KOR7SvW+EseEjrDiQQZH8L8X3sNR2rIQFVvroOXm8Zn+W5DAnnT/lB8TzAfSiY2r
zJyeYnvSIwCs8Z4/zYX2bH62vxnVUayp1wFZfD6kDFBq+DTX/4k9SS1kJ1e7Q78y
gtKfKNG6xcRbMCELC1hk7FCNNoYyEF7LKiwPKFotkpC4OWDk3a+LjLHNwUi9T8Lg
H+kIsPwBo6uan1o1h/Z61gP5v7TO5BaBAd+d0kgGbHXVKv4QCoChoSyR0f8ioPkv
oKX2+TBB+Tni+FYe7LEHpQLbLz+rWdnTeY4BZv3jz7uFu9rGaEugQEoO/12dGUH4
GA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:35:19 2025 by rpki-client