Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.cer (raw, json)
Hash identifier: 34baawgOQfVS+sYvZR/m2sEDd1rMfyG/42P1bTq4oPM=
Subject key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023A8E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Mar 2025 20:42:45 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 202.37.72.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146062 (0x23a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 28 20:42:45 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91CE28E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:7a:6b:21:1a:f7:e3:69:b7:d8:db:4b:13:
d7:82:74:65:c1:09:6b:80:66:89:8c:b0:4b:ef:e2:
37:9c:f1:8a:11:80:dc:c1:53:3b:03:fa:e9:53:84:
8a:fe:a6:d0:b6:69:3b:b8:22:4f:9b:bf:66:7a:26:
91:8a:0d:c4:a8:d2:84:0a:a7:87:9b:cf:3f:71:ad:
ce:6c:e2:9a:54:c0:19:c6:9d:ac:e2:d1:4b:96:32:
40:95:c7:dc:7c:97:fd:c3:a3:ee:41:55:63:58:27:
91:72:df:18:f6:b8:21:de:47:cc:43:ba:77:87:ab:
f7:a1:70:28:48:77:09:cc:7c:ec:96:70:26:1e:5e:
66:11:8f:11:e1:29:6f:0a:5c:6e:49:e7:c3:a0:63:
fe:75:69:66:7f:2e:07:0d:ab:9a:b0:eb:0d:dc:dc:
95:d8:cd:77:40:5a:66:16:de:d1:83:1f:e9:31:d8:
05:e1:42:fa:2c:8d:05:9a:67:93:86:a4:cc:5d:1c:
7b:1c:a7:ac:ef:98:87:dd:78:ef:52:84:71:b8:38:
f2:23:eb:64:b2:f0:a9:7d:b5:20:53:3b:5e:04:eb:
69:e0:28:f2:f3:69:7b:bc:71:5d:b3:b3:96:19:13:
7e:64:24:74:b9:a2:73:9f:0c:72:38:1d:ae:92:01:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.72.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0b:66:2e:1c:53:66:8b:70:05:51:df:ef:e1:c5:b1:e2:90:
ba:72:b0:80:68:22:15:6c:32:72:ca:22:3b:fe:1c:1c:4d:71:
da:4c:d4:c3:95:88:7e:67:e6:1b:ef:67:99:10:bc:5f:c1:b8:
13:b9:1a:23:98:53:02:d3:e2:ec:ca:4a:b2:59:3e:74:e0:c0:
d4:c6:77:53:8b:7c:20:d2:69:19:00:e0:cf:83:40:54:db:58:
61:ff:f4:01:4b:70:43:6e:9b:f6:fe:99:e8:d0:6c:dd:ce:8f:
e6:bd:bd:49:75:81:0c:39:e1:57:a1:b7:24:d3:19:16:3c:24:
da:d7:3f:14:4b:20:ac:0d:d4:dc:3f:61:6d:bc:aa:f0:8e:0f:
57:0e:ba:67:92:95:b2:55:e4:62:ff:85:da:1c:c4:61:fa:19:
03:5f:1c:51:c6:5e:4e:31:d1:f1:ec:44:8a:33:66:14:95:c0:
df:a9:af:e4:13:3d:9b:4b:26:30:d9:ea:c5:47:b5:90:d8:21:
35:27:99:2a:52:12:d1:28:3d:20:75:13:ef:61:cb:7a:52:3a:
a9:25:1d:96:59:df:5a:91:ef:c3:3b:82:af:82:76:9d:c9:dc:
bf:c3:4c:f9:2b:1d:49:18:29:97:93:f6:a1:68:09:5c:df:41:
15:19:ee:07
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAjqOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyODIwNDI0NVoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4
M0M2ODI1QjJBMzE5N0FDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDevXprIRr342m32NtLE9eCdGXBCWuAZomMsEvv4jec8YoRgNzBUzsD+ulThIr+
ptC2aTu4Ik+bv2Z6JpGKDcSo0oQKp4ebzz9xrc5s4ppUwBnGnazi0UuWMkCVx9x8
l/3Do+5BVWNYJ5Fy3xj2uCHeR8xDuneHq/ehcChIdwnMfOyWcCYeXmYRjxHhKW8K
XG5J58OgY/51aWZ/LgcNq5qw6w3c3JXYzXdAWmYW3tGDH+kx2AXhQvosjQWaZ5OG
pMxdHHscp6zvmIfdeO9ShHG4OPIj62Sy8Kl9tSBTO14E62ngKPLzaXu8cV2zs5YZ
E35kJHS5onOfDHI4Ha6SAb9JAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUL2E4/i25
TvfjPsCDxoJbKjGXrOYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNFMjhFL0RERUE3Mjc0QjczQjExRUQ5MTYzOTQ4M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDRTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2ky
NVR2ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADKJUgwDQYJKoZIhvcNAQELBQADggEBAHILZi4cU2aLcAVR3+/h
xbHikLpysIBoIhVsMnLKIjv+HBxNcdpM1MOViH5n5hvvZ5kQvF/BuBO5GiOYUwLT
4uzKSrJZPnTgwNTGd1OLfCDSaRkA4M+DQFTbWGH/9AFLcENum/b+mejQbN3Oj+a9
vUl1gQw54VehtyTTGRY8JNrXPxRLIKwN1Nw/YW28qvCOD1cOumeSlbJV5GL/hdoc
xGH6GQNfHFHGXk4x0fHsRIozZhSVwN+pr+QTPZtLJjDZ6sVHtZDYITUnmSpSEtEo
PSB1E+9hy3pSOqklHZZZ31qR78M7gq+Cdp3J3L/DTPkrHUkYKZeT9qFoCVzfQRUZ
7gc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:40:18 2025 by rpki-client