Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.cer (raw, json)
Hash identifier: 53nWYHyN8/858La4gZ8Y1w518yJ82FqDNNiNkbObkIs=
Subject key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02223B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Dec 2024 18:01:01 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 103.77.120.0/22
IP: 2402:a8c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139835 (0x2223b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 11 18:01:01 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A919FF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:7d:cb:20:03:42:f5:74:45:bb:da:90:4c:
48:4e:1e:b6:51:0d:72:ad:1f:ad:77:d2:ef:5f:2f:
b1:9e:bb:32:00:64:a9:fd:b2:35:5a:3d:2d:26:f5:
d2:57:e1:dd:a2:09:59:3e:ab:c5:f7:14:aa:ac:03:
04:f1:11:b2:01:3f:aa:cd:bc:7d:4a:c2:05:93:1a:
7b:b5:95:45:72:a6:c3:0b:5b:78:b7:62:b3:fd:91:
ce:5b:66:ad:f1:0f:d7:52:f5:20:19:8e:4d:3d:9f:
6c:f2:a3:3d:e7:35:df:a0:b2:c2:e9:44:a0:2d:10:
31:30:b6:9b:50:53:19:03:69:6d:a5:cc:31:ee:87:
71:6f:de:9a:71:88:c7:f8:a7:04:32:b1:e2:4b:53:
1c:5e:50:49:d7:be:ee:e5:9d:45:3a:5d:70:4a:88:
84:91:84:b9:ed:63:11:de:76:0b:87:f6:f0:12:37:
5c:50:e6:26:7c:c1:fd:56:50:43:68:23:81:67:36:
e1:0c:39:8d:d3:76:d3:95:95:13:4b:01:94:2c:11:
19:30:87:ba:90:24:77:bb:36:c2:11:14:34:23:63:
7b:f8:98:af:ab:7b:3e:22:3b:26:93:75:d7:e6:0c:
c4:86:83:f3:6e:53:bc:92:ca:9a:52:7d:4a:e9:06:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.120.0/22
IPv6:
2402:a8c0::/32
Signature Algorithm: sha256WithRSAEncryption
d9:6c:56:27:76:dc:f5:e9:e7:17:4e:d2:b0:ed:aa:ae:a3:f4:
04:fa:d3:ea:35:00:83:f9:b9:57:9c:7c:cd:43:a3:39:26:3a:
41:a7:b8:d3:9c:14:f8:66:94:74:87:56:c9:fa:74:82:7b:1d:
2a:a6:0d:44:d0:09:b8:c4:67:47:44:6d:28:21:0e:b6:cb:6a:
0a:a3:9e:0c:d7:36:dc:e1:2f:35:73:b6:72:d1:86:62:e7:3d:
42:91:de:64:af:ee:e1:15:49:4a:5a:4d:20:25:e7:76:ce:15:
56:cc:7b:ea:c8:31:aa:a6:8b:ea:f9:be:78:b2:74:3e:6c:3d:
4c:80:0b:a6:4f:03:c5:da:80:c3:22:a8:6a:6b:6b:f4:14:49:
23:01:d0:e9:a8:a5:ff:c9:a6:73:3e:ac:3f:b5:7e:f8:76:38:
f0:bc:13:c9:c6:aa:17:d0:8b:11:93:3f:32:c9:77:e0:dd:da:
50:a2:6a:ad:d3:22:9b:b1:5c:8f:09:82:08:cd:02:36:35:9c:
8c:ba:be:e8:42:26:97:02:f8:dd:e8:d8:22:5e:f7:2c:e9:2c:
a5:a7:0d:36:03:09:d6:72:c1:1c:47:e4:dd:72:2e:cd:41:9b:
c4:f5:c1:1c:7d:b7:27:22:6f:2e:52:a3:2e:c1:7d:c9:2a:a2:
04:be:e2:6a
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAiI7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxMTE4MDEwMVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAy
M0UxODlENjEyOEE2NDVGNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiW33LIANC9XRFu9qQTEhOHrZRDXKtH6130u9fL7GeuzIAZKn9sjVaPS0m9dJX
4d2iCVk+q8X3FKqsAwTxEbIBP6rNvH1KwgWTGnu1lUVypsMLW3i3YrP9kc5bZq3x
D9dS9SAZjk09n2zyoz3nNd+gssLpRKAtEDEwtptQUxkDaW2lzDHuh3Fv3ppxiMf4
pwQyseJLUxxeUEnXvu7lnUU6XXBKiISRhLntYxHedguH9vASN1xQ5iZ8wf1WUENo
I4FnNuEMOY3TdtOVlRNLAZQsERkwh7qQJHe7NsIRFDQjY3v4mK+rez4iOyaTddfm
DMSGg/NuU7ySyppSfUrpBpntAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU+r7TJg0s
VSvpFdAj4YnWEopkX0swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGRjc5L0EzQzA4QTJFQ0E5NzExRThBQUU4MDc1RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcw
c1ZTdnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnTXgwDQQCAAIwBwMFACQCqMAwDQYJKoZIhvcNAQELBQADggEB
ANlsVid23PXp5xdO0rDtqq6j9AT60+o1AIP5uVecfM1DozkmOkGnuNOcFPhmlHSH
Vsn6dIJ7HSqmDUTQCbjEZ0dEbSghDrbLagqjngzXNtzhLzVztnLRhmLnPUKR3mSv
7uEVSUpaTSAl53bOFVbMe+rIMaqmi+r5vniydD5sPUyAC6ZPA8XagMMiqGpra/QU
SSMB0Omopf/JpnM+rD+1fvh2OPC8E8nGqhfQixGTPzLJd+Dd2lCiaq3TIpuxXI8J
ggjNAjY1nIy6vuhCJpcC+N3o2CJe9yzpLKWnDTYDCdZywRxH5N1yLs1Bm8T1wRx9
tyciby5Soy7BfckqogS+4mo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:55:26 2025 by rpki-client