Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.cer (raw, json)
Hash identifier: fkWmo2HGoeuMKROVCLEEUdA9QqQxCuvhxgohZH9j4ls=
Subject key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02293F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Jan 2025 17:24:30 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 43.228.156.0/22
IP: 103.47.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141631 (0x2293f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 14 17:24:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9183B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:33:e3:46:44:d7:0c:98:1c:de:78:48:23:
f0:6b:a5:9e:d1:76:5e:d9:3a:a9:de:82:f8:29:a5:
b7:b4:4a:ed:af:a7:51:2f:61:ed:9c:6e:c3:51:71:
6f:46:36:9a:3c:39:6f:0e:a4:77:6b:e8:30:9c:f1:
85:f7:50:5e:5f:d8:5f:af:e0:d9:99:bd:b1:85:4e:
08:a7:be:2c:d0:1a:0a:51:d1:06:93:82:2b:1c:9a:
6b:01:7f:61:e5:61:78:12:8e:94:91:81:e6:0c:fd:
18:d2:89:4a:6e:0b:fb:a9:8d:e2:44:e9:4b:e9:8d:
52:a9:77:e1:bd:be:60:a8:54:df:60:79:50:f0:58:
61:98:c9:15:d7:db:98:fe:77:9a:0c:54:13:80:78:
73:19:6b:77:cc:7d:b9:8e:6d:32:dd:fa:3d:1d:ec:
e5:47:b5:83:71:4a:7f:98:07:95:4b:cf:bb:e6:14:
90:d3:28:52:e0:f6:5e:33:d9:42:47:78:1a:61:86:
ba:b2:b5:2a:df:3d:34:a6:9b:2a:10:72:4a:72:ad:
66:6b:1d:cc:41:e6:5d:03:f7:01:13:ca:dc:c3:92:
8f:35:6f:ba:f3:03:8b:95:95:55:69:d1:2c:c6:ab:
81:aa:3d:e0:e6:43:2d:54:77:fd:09:06:de:fa:f6:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.156.0/22
103.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e9:00:25:b6:53:34:17:74:64:d2:1d:13:40:40:ed:a8:c6:
05:f3:d7:3d:02:71:49:2e:76:0d:91:da:ac:bf:1e:c8:31:8d:
cd:91:a1:0d:65:6c:b6:0b:36:c1:d6:ee:37:ad:4a:64:61:0c:
30:53:b8:9d:2c:e6:67:93:8b:95:9a:ee:c1:7e:48:24:2f:fe:
81:28:71:cd:4f:92:5e:46:4d:54:28:8f:8d:99:1a:14:e9:95:
6e:ef:d4:68:1e:e5:14:e0:44:3c:11:d5:66:8b:ab:61:94:28:
2b:6e:ff:8a:ee:f8:bc:fe:49:19:4a:91:ef:b8:5b:82:93:86:
bd:0a:28:73:28:68:98:c7:97:28:3a:38:57:44:f8:50:8c:56:
5b:e0:fe:ce:8a:05:9d:db:c5:4c:a2:1b:a1:ce:ca:a4:26:bf:
b5:5c:b0:b2:c8:ab:9d:ba:59:22:9e:f2:53:e5:37:2c:b3:42:
b8:03:5a:aa:7b:4e:aa:0f:c4:af:81:bb:24:8d:32:f6:3b:e9:
49:5a:bb:53:f6:96:c5:e7:12:f9:84:96:1b:ca:02:19:ce:cb:
90:89:cc:7d:fa:fe:2c:79:f9:55:34:d6:15:3b:ac:f4:ca:9c:
02:2a:87:09:8c:84:f1:6d:fe:b3:4f:2f:99:74:c8:4e:3b:b3:
b4:8c:f3:2e
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAik/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDExNDE3MjQzMFoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5
RDZDNjE0NzE1RTJDNTEzM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbcjPjRkTXDJgc3nhII/BrpZ7Rdl7ZOqnegvgppbe0Su2vp1EvYe2cbsNRcW9G
Npo8OW8OpHdr6DCc8YX3UF5f2F+v4NmZvbGFTginvizQGgpR0QaTgiscmmsBf2Hl
YXgSjpSRgeYM/RjSiUpuC/upjeJE6UvpjVKpd+G9vmCoVN9geVDwWGGYyRXX25j+
d5oMVBOAeHMZa3fMfbmObTLd+j0d7OVHtYNxSn+YB5VLz7vmFJDTKFLg9l4z2UJH
eBphhrqytSrfPTSmmyoQckpyrWZrHcxB5l0D9wETytzDko81b7rzA4uVlVVp0SzG
q4GqPeDmQy1Ud/0JBt769g3XAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQU+tfsycBc
2OsgVpCdbGFHFeLFEz4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgzQjk1L0I1NEEzQzM0ODAzNTExRUM5QUREQTU0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNC
YzJPc2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBAIr5JwDBAJnL5AwDQYJKoZIhvcNAQELBQADggEBAL7pACW2UzQX
dGTSHRNAQO2oxgXz1z0CcUkudg2R2qy/Hsgxjc2RoQ1lbLYLNsHW7jetSmRhDDBT
uJ0s5meTi5Wa7sF+SCQv/oEocc1Pkl5GTVQoj42ZGhTplW7v1Gge5RTgRDwR1WaL
q2GUKCtu/4ru+Lz+SRlKke+4W4KThr0KKHMoaJjHlyg6OFdE+FCMVlvg/s6KBZ3b
xUyiG6HOyqQmv7VcsLLIq526WSKe8lPlNyyzQrgDWqp7TqoPxK+BuySNMvY76Ula
u1P2lsXnEvmElhvKAhnOy5CJzH36/ix5+VU01hU7rPTKnAIqhwmMhPFt/rNPL5l0
yE47s7SM8y4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:03:40 2025 by rpki-client