Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.cer (raw, json)
Hash identifier: QuMDOmNNGMjaNonWpwI5YsBnQDvO5Q/FKYplx9pZcNo=
Subject key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6358
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Mar 2025 18:59:35 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.20.104.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25432 (0x6358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 26 18:59:35 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9190D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:cd:b5:36:62:a3:5f:75:fc:c8:a7:93:e4:
1f:03:af:02:41:fa:dc:9f:db:bd:8d:dc:71:ca:8b:
a9:4f:91:d9:89:45:34:c1:d9:6f:27:ff:1b:f3:7c:
80:45:77:2f:0d:d1:2f:8f:bb:c7:7a:5c:50:7c:83:
00:23:c5:da:56:8c:00:c7:00:72:ad:98:16:7d:49:
cc:49:26:a6:34:62:5a:1a:ba:f8:0c:d8:cc:ce:b2:
ef:8a:12:9d:26:49:aa:2f:49:c2:3f:ba:69:ec:c8:
a9:ab:32:15:f3:0f:7a:30:0a:87:bd:4d:47:14:18:
18:24:da:f8:82:c1:9c:50:5e:2a:cd:8c:1c:a2:cd:
b7:46:ea:ba:5d:9b:fd:20:27:99:c2:90:81:db:9e:
ef:91:8f:32:f0:71:fe:40:0e:6d:ab:a8:53:47:4a:
a2:ba:c5:db:e4:19:cd:a4:7d:91:b7:37:49:42:1d:
c3:02:ce:8d:7a:fd:fc:74:d0:a2:42:fe:fb:d9:0c:
ec:ff:42:fb:da:7a:b1:4e:90:01:97:63:84:57:bc:
8b:71:b6:b1:06:b1:46:03:d6:ce:75:71:02:f8:b8:
96:aa:bb:d2:eb:09:61:c8:18:a9:39:34:19:44:57:
ec:2c:6d:f4:d8:b1:ab:4d:58:df:5c:81:5f:09:fb:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.104.0/23
Signature Algorithm: sha256WithRSAEncryption
78:a8:fd:67:2e:35:e4:a0:4e:fa:71:ba:41:70:0d:27:1a:9d:
19:0b:e6:68:7f:b2:90:98:78:67:83:b8:39:0d:60:4c:40:8c:
4b:d3:21:09:02:5f:33:e0:5c:7f:e0:b9:52:93:b0:9e:10:3e:
b5:f9:ac:32:28:ac:3b:32:c2:8c:63:be:5a:c9:60:aa:3d:7c:
f4:81:73:92:2c:c9:71:f9:3c:b9:86:aa:f1:ad:fa:ea:97:89:
50:ca:14:eb:96:ab:7b:47:31:5d:e9:87:b4:84:15:08:c9:e6:
05:52:64:f2:76:18:18:f8:69:3f:f5:e8:42:55:ab:88:2f:79:
10:a7:64:9a:1e:d2:f1:62:d8:93:1d:00:9f:9b:d0:d9:2d:7d:
8d:ff:99:c7:08:50:0e:3c:76:ca:39:0a:56:7b:b9:47:3f:20:
2a:8e:25:eb:ca:a7:e9:55:a4:d4:36:c4:58:db:07:fb:0d:46:
d7:a3:49:fd:2e:d0:a8:29:d4:2f:23:dc:50:b5:bd:2f:86:0e:
bf:28:e1:12:41:74:2d:aa:51:ae:4f:6b:59:c6:89:e7:30:74:
f7:48:75:ca:6e:33:f0:6a:70:8a:4d:63:a6:46:cd:25:d5:85:
ab:89:ce:5a:9f:ba:32:1e:d4:c8:83:1d:d1:e7:1d:06:0a:be:
52:2d:fc:67
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICY1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMzI2MTg1OTM1WhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5MEQ3MjExMC8GA1UEBRMoQTU0Q0I3NzQyQUFCQ0Y0RTU4RTVENEMx
RjNCOUQxMkRBRDkxQjQwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKuQzbU2YqNfdfzIp5PkHwOvAkH63J/bvY3cccqLqU+R2YlFNMHZbyf/G/N8gEV3
Lw3RL4+7x3pcUHyDACPF2laMAMcAcq2YFn1JzEkmpjRiWhq6+AzYzM6y74oSnSZJ
qi9Jwj+6aezIqasyFfMPejAKh71NRxQYGCTa+ILBnFBeKs2MHKLNt0bqul2b/SAn
mcKQgdue75GPMvBx/kAObauoU0dKorrF2+QZzaR9kbc3SUIdwwLOjXr9/HTQokL+
+9kM7P9C+9p6sU6QAZdjhFe8i3G2sQaxRgPWznVxAvi4lqq70usJYcgYqTk0GURX
7Cxt9Nixq01Y31yBXwn780MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSlTLd0KqvP
Tljl1MHzudEtrZG0BjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTBENzIvNkFDOTg5RjBENDgyMTFFRTg3RDVENzI0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkwRDcyLzZBQzk4OUYwRDQ4MjExRUU4N0Q1RDcyNEM0RjlBRTAyL3BVeTNkQ3Fy
ejA1WTVkVEI4N25STGEyUnRBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0UaDANBgkqhkiG9w0BAQsFAAOCAQEAeKj9Zy415KBO+nG6QXAN
JxqdGQvmaH+ykJh4Z4O4OQ1gTECMS9MhCQJfM+Bcf+C5UpOwnhA+tfmsMiisOzLC
jGO+Wslgqj189IFzkizJcfk8uYaq8a366peJUMoU65are0cxXemHtIQVCMnmBVJk
8nYYGPhpP/XoQlWriC95EKdkmh7S8WLYkx0An5vQ2S19jf+ZxwhQDjx2yjkKVnu5
Rz8gKo4l68qn6VWk1DbEWNsH+w1G16NJ/S7QqCnULyPcULW9L4YOvyjhEkF0LapR
rk9rWcaJ5zB090h1ym4z8Gpwik1jpkbNJdWFq4nOWp+6Mh7UyIMd0ecdBgq+Ui38
Zw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:42:23 2025 by rpki-client