Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.cer (raw, json)
Hash identifier: ezR+DvwxNtf3PHkwLwNLKJ6jdHMVX0j74841F1muRtM=
Subject key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02375D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Mar 2025 15:56:27 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 138602
IP: 103.134.84.0/24
IP: 2001:df7:c100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145245 (0x2375d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 13 15:56:27 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9184A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:b2:03:8a:a3:16:2a:56:5e:16:20:38:62:
bd:08:46:cb:1b:f1:c7:7d:cd:17:8d:ce:19:9f:14:
e4:bb:f9:7f:e8:e7:a5:55:d0:86:74:31:61:ce:4c:
5e:91:6f:ad:ee:30:70:c4:db:5e:c4:a3:09:fd:2e:
65:ca:35:39:23:e5:4f:5c:e2:f2:2f:ad:54:0a:b8:
78:45:59:66:e4:b6:83:4f:5c:d1:e3:de:53:3d:d0:
aa:9f:06:5f:cb:0c:e9:b5:e9:1a:c2:53:4d:25:1f:
44:ba:a3:9d:2b:36:0e:eb:b0:3f:f2:62:1e:63:30:
fb:5d:08:50:98:94:3d:43:45:15:b7:29:93:a3:39:
ef:e8:f4:f9:dc:f2:af:b4:bf:0c:f7:4a:05:ae:38:
95:3f:67:84:8e:59:52:59:6f:c9:9f:89:f7:8f:c6:
2b:8c:1d:ce:c3:98:85:a0:cc:71:db:55:2d:14:0b:
5b:d2:53:09:09:ee:df:be:4c:45:38:67:ff:4b:fc:
34:5c:d0:63:f9:ae:e4:5c:54:e1:77:ea:9f:bc:69:
39:9e:6c:ca:d0:54:7f:24:3d:f5:22:60:1a:17:f2:
40:e2:10:dc:4e:c1:24:ec:d6:22:71:8e:12:02:d4:
e6:49:99:ab:04:6b:97:2d:39:3b:38:2f:71:ce:f2:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138602
sbgp-ipAddrBlock: critical
IPv4:
103.134.84.0/24
IPv6:
2001:df7:c100::/48
Signature Algorithm: sha256WithRSAEncryption
22:b7:c0:55:f1:22:84:c3:09:6a:9b:c2:a8:a9:44:72:40:c9:
e3:0a:ba:6e:fb:35:40:1f:fd:12:c8:ae:28:9e:35:9b:2c:d0:
01:d3:d8:01:5a:4a:b3:a9:ca:fb:9c:64:61:1e:a1:4a:27:a3:
17:f6:e7:6c:23:47:eb:6a:d4:97:49:1a:e6:bd:b9:c2:b3:24:
5c:c9:2d:9c:d0:f0:cc:a0:c4:77:6c:ff:63:9a:31:60:6f:ac:
df:82:1f:38:6f:cc:00:b9:6a:64:13:c8:1c:ad:d4:d2:2e:22:
f0:ab:fd:3b:32:f3:24:b2:97:f8:40:42:8d:39:dc:20:86:0e:
3e:85:3b:03:23:60:0f:78:63:16:08:8f:75:23:d6:2a:ae:eb:
9e:2a:36:06:23:74:0a:1c:b4:0f:c4:21:af:29:da:f7:7e:fc:
c9:ca:a6:b8:aa:59:f1:fa:d2:4f:96:b6:84:7b:27:fb:2a:ab:
fe:33:a8:34:70:04:40:97:e0:eb:25:27:5f:fe:cb:af:28:d5:
20:be:59:7b:cb:1e:c3:98:0f:de:83:20:75:1d:52:82:39:db:
d4:01:07:63:39:5a:3f:c0:8c:9d:76:9c:9f:bf:d5:64:8e:d2:
a0:88:08:a0:d4:75:e1:f6:9e:2b:14:d6:a0:57:00:5b:05:d3:
a3:00:41:c2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjddMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMxMzE1NTYyN1oXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVD
QjE3NENDRjkyRTczQTA4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDL87IDiqMWKlZeFiA4Yr0IRssb8cd9zReNzhmfFOS7+X/o56VV0IZ0MWHOTF6R
b63uMHDE217Eown9LmXKNTkj5U9c4vIvrVQKuHhFWWbktoNPXNHj3lM90KqfBl/L
DOm16RrCU00lH0S6o50rNg7rsD/yYh5jMPtdCFCYlD1DRRW3KZOjOe/o9Pnc8q+0
vwz3SgWuOJU/Z4SOWVJZb8mfifePxiuMHc7DmIWgzHHbVS0UC1vSUwkJ7t++TEU4
Z/9L/DRc0GP5ruRcVOF36p+8aTmebMrQVH8kPfUiYBoX8kDiENxOwSTs1iJxjhIC
1OZJmasEa5ctOTs4L3HO8ugTAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU8mzvyND2
FJXOpWXLF0zPkuc6CJkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg0QTBBL0Q0OTFEODgwMDY1MzExRUZCOTY3MDM1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5E
MkZKWE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh1qMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ4ZUMA8EAgAC
MAkDBwAgAQ33wQAwDQYJKoZIhvcNAQELBQADggEBACK3wFXxIoTDCWqbwqipRHJA
yeMKum77NUAf/RLIriieNZss0AHT2AFaSrOpyvucZGEeoUonoxf252wjR+tq1JdJ
Gua9ucKzJFzJLZzQ8MygxHds/2OaMWBvrN+CHzhvzAC5amQTyByt1NIuIvCr/Tsy
8ySyl/hAQo053CCGDj6FOwMjYA94YxYIj3Uj1iqu654qNgYjdAoctA/EIa8p2vd+
/MnKpriqWfH60k+WtoR7J/sqq/4zqDRwBECX4OslJ1/+y68o1SC+WXvLHsOYD96D
IHUdUoI529QBB2M5Wj/AjJ12nJ+/1WSO0qCICKDUdeH2nisU1qBXAFsF06MAQcI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:03:00 2025 by rpki-client