Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
File: M50SzjfjomH20PRT5ZlQqEvI_qI.cer (raw, json)
Hash identifier: BuO85sdNBzt3e/luacgDCVVnKLRw95GtoxTrr3F+saI=
Subject key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022684
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:14:36 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 150718
AS: 150753
IP: 103.67.22.0/23
IP: 2001:df1:d0c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140932 (0x22684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 1 13:14:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A912D20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:98:a0:8f:08:15:53:89:42:66:25:c7:6e:
05:45:60:d2:d6:f6:15:ab:9a:cf:51:1c:5f:f8:48:
a2:ba:95:0a:8e:c7:75:0c:4e:f6:47:be:7d:0e:53:
85:14:6f:08:e8:72:d1:5c:9f:54:8c:90:3c:f8:fd:
13:60:f1:af:ec:85:89:c2:8b:f3:11:e1:ad:59:bc:
93:37:5c:ec:18:4b:57:a6:2e:80:36:19:a7:b0:22:
54:7d:4c:1b:aa:f4:24:7a:52:42:27:f1:ef:2f:4a:
e6:91:82:4e:b9:c1:44:2d:0e:e1:65:ef:11:62:6f:
19:0d:fd:ba:e4:04:a0:7e:30:a7:90:b0:75:d4:d8:
aa:21:3f:9a:5f:b9:f6:63:01:5f:d3:21:46:7c:d9:
e3:b5:d8:96:19:0c:4c:23:26:bd:cc:90:c5:1f:76:
2e:fb:0b:24:d9:2a:24:20:65:a3:8d:9f:d4:d9:69:
26:37:aa:b1:dc:ee:40:dd:6e:03:06:4d:24:2a:1f:
f4:07:fa:39:45:ef:6d:bb:73:70:12:81:7f:1e:c3:
43:a6:3a:d8:19:2f:50:e1:1b:aa:fd:9b:a2:91:8b:
09:d6:58:07:b6:2e:8d:9f:da:d3:f6:bd:ee:60:57:
e6:4e:6c:36:91:22:e5:f6:fa:0f:75:0c:4c:d0:36:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150718
150753
sbgp-ipAddrBlock: critical
IPv4:
103.67.22.0/23
IPv6:
2001:df1:d0c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:8e:ff:12:1c:4f:8e:3f:4d:f4:56:3e:d6:15:42:20:9e:90:
8f:5f:9c:97:99:3c:73:85:4e:b6:1a:73:d5:8e:3b:07:22:ba:
49:2f:73:0f:38:56:b2:c6:9e:e4:ac:9c:0e:34:14:8a:d2:8d:
90:f3:30:c2:e9:7a:a0:8e:08:68:d5:89:aa:ab:f0:0c:5e:3b:
2e:1e:a7:d7:90:e5:1a:a7:5d:26:a1:49:ac:ea:39:58:a7:c3:
83:c7:2f:1d:82:d5:70:c6:86:5a:bd:78:17:de:a7:73:ba:83:
e0:a1:1b:ab:72:b8:1b:25:a3:17:cf:83:67:73:fb:e2:7e:30:
cc:33:97:5f:44:00:bc:34:d2:b4:d3:58:e7:5c:cb:05:49:13:
e8:88:3d:99:d3:af:c5:7a:e7:16:4c:a5:e1:39:6a:02:33:34:
9b:d8:6d:9a:b8:84:13:f7:6f:14:cc:8e:37:62:4f:25:c8:bc:
f4:3a:82:c8:d2:9d:34:71:9c:53:86:d5:3b:a3:c4:cb:57:ea:
10:61:bb:1e:99:72:37:ce:2b:01:fb:32:26:b6:22:b6:ca:96:
f1:8b:75:ee:09:94:49:e7:4b:68:5e:d3:1e:85:a3:09:78:d6:
d6:85:8f:13:42:80:2c:ec:71:9a:9d:a2:07:5e:d0:e2:07:d1:
be:1f:af:24
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAiaEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEwMTEzMTQzNloXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1
M0U1OTk1MEE4NEJDOEZFQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDl+5igjwgVU4lCZiXHbgVFYNLW9hWrms9RHF/4SKK6lQqOx3UMTvZHvn0OU4UU
bwjoctFcn1SMkDz4/RNg8a/shYnCi/MR4a1ZvJM3XOwYS1emLoA2GaewIlR9TBuq
9CR6UkIn8e8vSuaRgk65wUQtDuFl7xFibxkN/brkBKB+MKeQsHXU2KohP5pfufZj
AV/TIUZ82eO12JYZDEwjJr3MkMUfdi77CyTZKiQgZaONn9TZaSY3qrHc7kDdbgMG
TSQqH/QH+jlF7227c3ASgX8ew0OmOtgZL1DhG6r9m6KRiwnWWAe2Lo2f2tP2ve5g
V+ZObDaRIuX2+g91DEzQNnNNAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUM50Szjfj
omH20PRT5ZlQqEvI/qIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJEMjBDL0Q0MEVGRjhFQTg1MTExRURCQjMyRTc0OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempm
am9tSDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAky+AgMCTOEwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnQxYw
DwQCAAIwCQMHACABDfHQwDANBgkqhkiG9w0BAQsFAAOCAQEAJY7/EhxPjj9N9FY+
1hVCIJ6Qj1+cl5k8c4VOthpz1Y47ByK6SS9zDzhWssae5KycDjQUitKNkPMwwul6
oI4IaNWJqqvwDF47Lh6n15DlGqddJqFJrOo5WKfDg8cvHYLVcMaGWr14F96nc7qD
4KEbq3K4GyWjF8+DZ3P74n4wzDOXX0QAvDTStNNY51zLBUkT6Ig9mdOvxXrnFkyl
4TlqAjM0m9htmriEE/dvFMyON2JPJci89DqCyNKdNHGcU4bVO6PEy1fqEGG7Hply
N84rAfsyJrYitsqW8Yt17gmUSedLaF7THoWjCXjW1oWPE0KALOxxmp2iB17Q4gfR
vh+vJA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:33 2025 by rpki-client