Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
File: A3iO4rrk2AXrzcpmGOLsGhilxOI.cer (raw, json)
Hash identifier: Y3cZz8k25ageFaqjSWkJOvWEKRGoUMAHyzBcifiVw1k=
Subject key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022A25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jan 2025 03:29:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 153531
IP: 2001:df4:f0c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 00:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141861 (0x22a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 20 03:29:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A915FDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:13:5b:21:5d:d1:d6:b7:0d:06:35:57:b7:0b:
49:72:73:26:c7:80:c5:29:ee:54:5c:46:cf:7a:d8:
05:2a:a6:56:bf:81:8b:c4:01:ec:6a:e7:95:5a:5c:
71:57:f7:c8:97:84:c1:8d:f1:9f:48:d5:41:a4:17:
6d:3a:61:47:c4:b7:31:66:4a:75:ff:c7:d7:0d:5f:
c2:2c:9b:43:64:2d:50:64:3d:07:13:b3:56:ed:b6:
02:8a:7c:e4:a7:c4:21:bf:ae:3d:6c:9e:b3:74:a7:
24:00:bd:25:fe:1f:f2:4a:a2:b3:67:7e:8b:f3:1b:
1c:df:33:22:70:a5:3c:2c:85:3e:00:eb:bb:7f:39:
74:97:0c:d1:db:8f:a9:29:7a:a7:50:c1:9e:dc:3d:
b2:a1:5a:e6:2f:dc:f9:17:66:b4:d3:0c:d5:51:68:
dd:fa:8a:0e:49:2e:10:6a:57:b5:4f:39:db:ed:b5:
6d:c4:d2:c1:57:1f:ee:bd:be:7b:96:f7:de:6d:a3:
46:a0:00:ef:18:b9:a1:b1:a6:10:8f:36:c1:8d:dd:
f9:02:c0:88:f4:82:ca:db:0b:d7:2a:0b:9c:ec:3c:
a4:fd:3b:48:41:5d:4b:db:fb:dd:aa:08:92:07:25:
65:75:f2:d1:7c:07:db:da:f2:fb:77:8a:2c:18:2e:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153531
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:f0c0::/48
Signature Algorithm: sha256WithRSAEncryption
84:c9:2b:96:3a:30:eb:02:13:7e:0e:86:ae:e2:e7:6d:07:03:
2e:dd:15:3f:7e:07:23:84:8d:a2:dd:4e:3f:91:39:df:f7:87:
e0:0c:74:3b:27:94:32:d9:65:2e:69:06:d7:ac:54:4c:29:c1:
0e:f9:c0:a6:e9:a8:09:ec:2a:75:1a:a0:46:9e:65:f8:9c:8f:
17:08:f2:7b:87:2d:9d:13:9d:b4:12:c0:7f:71:31:4a:6c:45:
da:2b:c5:14:a9:f8:18:87:75:a1:30:f2:dd:a5:87:bf:e3:c1:
da:91:3c:3a:18:e4:b9:da:e9:5b:5b:3f:61:11:90:95:29:76:
ec:5e:5e:ac:e9:2a:50:5b:07:6d:e8:80:2b:64:07:83:21:30:
46:8b:e0:43:8e:64:e5:8c:0a:9b:92:01:d2:97:bb:67:8a:d7:
b7:9d:5d:ee:9c:e0:38:91:38:e1:34:1e:93:fd:32:aa:39:4c:
bb:c6:2a:8a:b8:47:94:21:25:6b:12:1b:3a:be:48:80:4f:b3:
67:da:9a:63:6d:13:7c:86:03:78:97:16:ee:31:c4:46:01:fd:
4f:e6:6b:2a:46:95:78:dd:fa:91:fa:03:a7:36:af:ee:ad:7c:
11:97:1f:88:db:18:53:6c:a3:c1:94:c6:0e:f5:c1:ae:f4:39:
fe:2d:c1:d0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAiolMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEyMDAzMjkyOFoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2
NjE4RTJFQzFBMThBNUM0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvE1shXdHWtw0GNVe3C0lycybHgMUp7lRcRs962AUqpla/gYvEAexq55VaXHFX
98iXhMGN8Z9I1UGkF206YUfEtzFmSnX/x9cNX8Ism0NkLVBkPQcTs1bttgKKfOSn
xCG/rj1snrN0pyQAvSX+H/JKorNnfovzGxzfMyJwpTwshT4A67t/OXSXDNHbj6kp
eqdQwZ7cPbKhWuYv3PkXZrTTDNVRaN36ig5JLhBqV7VPOdvttW3E0sFXH+69vnuW
995to0agAO8YuaGxphCPNsGN3fkCwIj0gsrbC9cqC5zsPKT9O0hBXUvb+92qCJIH
JWV18tF8B9va8vt3iiwYLrCzAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUA3iO4rrk
2AXrzcpmGOLsGhilxOIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGREQ5L0JFN0NBQzEyRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJy
azJBWHJ6Y3BtR09Mc0doaWx4T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAle7MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9PDAMA0G
CSqGSIb3DQEBCwUAA4IBAQCEySuWOjDrAhN+Doau4udtBwMu3RU/fgcjhI2i3U4/
kTnf94fgDHQ7J5Qy2WUuaQbXrFRMKcEO+cCm6agJ7Cp1GqBGnmX4nI8XCPJ7hy2d
E520EsB/cTFKbEXaK8UUqfgYh3WhMPLdpYe/48HakTw6GOS52ulbWz9hEZCVKXbs
Xl6s6SpQWwdt6IArZAeDITBGi+BDjmTljAqbkgHSl7tnite3nV3unOA4kTjhNB6T
/TKqOUy7xiqKuEeUISVrEhs6vkiAT7Nn2ppjbRN8hgN4lxbuMcRGAf1P5msqRpV4
3fqR+gOnNq/urXwRlx+I2xhTbKPBlMYO9cGu9Dn+LcHQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:00 2025 by rpki-client