Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
File: EnvYBqI30MrekRgrn8cmZZvi73E.cer (raw, json)
Hash identifier: 8jIdXijrYwUB/y/i+OXB6+S2goNYvAomMO014Z0f4Sw=
Subject key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0231FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Feb 2025 20:40:59 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132015
IP: 2407:f80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143867 (0x231fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 18 20:40:59 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91D3876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:fb:8e:34:e5:85:a3:88:59:06:7e:79:cf:
f1:2c:aa:07:19:9c:ed:73:44:f3:2a:6c:af:4a:3e:
c2:a7:53:93:d0:fd:39:d5:c5:32:da:da:b3:33:1c:
50:e4:97:40:84:8f:35:ab:15:0f:3b:c3:b3:cd:0e:
2a:dc:eb:47:79:c5:16:79:b0:eb:18:85:df:ee:c1:
32:15:53:d4:2e:e4:a5:68:b3:a8:b7:e4:2b:ae:a4:
60:1f:ed:6d:33:ba:f8:37:84:f0:9c:66:d0:b6:ad:
83:ae:c7:4d:f7:e4:ea:3d:b8:58:42:d7:e9:84:6a:
f3:ad:51:56:96:7b:81:c5:0d:a8:fa:40:60:bf:79:
23:f8:d0:ea:ae:05:1e:d4:02:50:e2:e2:40:88:c1:
76:51:ac:fc:42:97:f7:39:e8:ea:62:8e:ed:b3:d3:
47:94:17:6b:0f:49:73:f4:da:a7:1c:8d:94:fb:7b:
7b:11:ed:71:22:20:e2:b1:0c:cc:8a:8d:b8:06:5a:
01:1b:d3:65:56:ba:b8:bd:b2:a1:1f:20:68:a4:09:
65:fa:b9:35:d3:f5:9a:9c:f4:9c:46:63:4c:28:7f:
ab:c7:32:f2:db:06:af:0d:66:53:31:8e:f9:13:9f:
69:f4:e5:f9:02:8b:e4:ba:9b:fb:a9:10:13:32:fb:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132015
sbgp-ipAddrBlock: critical
IPv6:
2407:f80::/32
Signature Algorithm: sha256WithRSAEncryption
52:7d:c7:d7:2a:61:e2:c5:f3:9c:8b:99:8b:85:3f:b0:a7:25:
4d:13:6e:1d:d1:b4:fd:45:4f:fd:e6:04:9b:54:90:50:da:13:
0b:ae:f3:1b:28:db:2d:5b:a3:9c:09:59:c6:0d:77:44:79:ac:
44:02:e3:81:00:d0:4b:9a:ed:f4:93:f7:ff:a3:0c:08:fa:ac:
08:58:4c:df:d6:9d:c0:b8:b2:cd:ee:1b:5e:01:b9:13:c2:01:
19:c9:7c:f0:e0:9d:d8:3a:f7:c7:0d:7a:be:07:ef:a0:06:7f:
fc:37:92:71:08:e7:d2:72:d0:e2:c4:1b:0b:16:86:2e:c1:e0:
b3:02:3c:54:f1:14:87:a3:87:5a:75:35:f7:87:9d:f1:c7:61:
31:7c:99:be:87:c3:07:64:b6:bf:1f:d1:fd:e3:71:60:73:23:
b0:fa:51:75:b5:13:cb:fa:bd:2c:f7:9d:90:af:9f:d8:a4:ae:
ff:68:bf:88:58:5f:d8:58:e2:0e:68:56:c4:99:5b:b9:6f:79:
0a:73:cb:3e:9e:38:66:67:7e:96:a5:ea:f4:4c:bc:7b:e6:c5:
91:51:37:1e:10:82:22:bf:77:14:19:4f:be:6e:fe:66:0d:a4:
b7:75:b7:08:19:3d:57:cb:77:b3:51:ea:6f:72:cd:10:14:25:
2d:3c:10:4b
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAjH7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIxODIwNDA1OVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDM4NzYxMTAvBgNVBAUTKDEyN0JEODA2QTIzN0QwQ0FERTkxMTgy
QjlGQzcyNjY1OUJFMkVGNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx//uONOWFo4hZBn55z/EsqgcZnO1zRPMqbK9KPsKnU5PQ/TnVxTLa2rMzHFDk
l0CEjzWrFQ87w7PNDirc60d5xRZ5sOsYhd/uwTIVU9Qu5KVos6i35CuupGAf7W0z
uvg3hPCcZtC2rYOux0335Oo9uFhC1+mEavOtUVaWe4HFDaj6QGC/eSP40OquBR7U
AlDi4kCIwXZRrPxCl/c56Opiju2z00eUF2sPSXP02qccjZT7e3sR7XEiIOKxDMyK
jbgGWgEb02VWuri9sqEfIGikCWX6uTXT9Zqc9JxGY0wof6vHMvLbBq8NZlMxjvkT
n2n05fkCi+S6m/upEBMy+9kzAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUEnvYBqI3
0MrekRgrn8cmZZvi73EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQzODc2LzI2MkY3QUNBOTc3MjExRUJCRjZBNTM2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMzg3Ni8yNjJGN0FDQTk3NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJ
MzBNcmVrUmdybjhjbVpadmk3M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgOvMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAcPgDANBgkq
hkiG9w0BAQsFAAOCAQEAUn3H1yph4sXznIuZi4U/sKclTRNuHdG0/UVP/eYEm1SQ
UNoTC67zGyjbLVujnAlZxg13RHmsRALjgQDQS5rt9JP3/6MMCPqsCFhM39adwLiy
ze4bXgG5E8IBGcl88OCd2Dr3xw16vgfvoAZ//DeScQjn0nLQ4sQbCxaGLsHgswI8
VPEUh6OHWnU194ed8cdhMXyZvofDB2S2vx/R/eNxYHMjsPpRdbUTy/q9LPedkK+f
2KSu/2i/iFhf2FjiDmhWxJlbuW95CnPLPp44Zmd+lqXq9Ey8e+bFkVE3HhCCIr93
FBlPvm7+Zg2kt3W3CBk9V8t3s1Hqb3LNEBQlLTwQSw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:12 2025 by rpki-client