Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer (raw, json)
Hash identifier: QiuzKcqstc6N2UufplGNxdozG8xnrX1bYVl2ZejQoVY=
Subject key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF93
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 17:48:01 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.91.8.0/22
IP: 123.253.24.0/22
IP: 2401:c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126867 (0x1ef93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 17:48:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:7b:71:7a:8d:0d:e3:c6:8f:e8:23:10:7a:
19:c0:af:9f:e8:b2:bb:17:2f:1f:c9:7d:02:58:71:
24:4a:a6:72:ea:23:de:86:76:81:bd:46:1a:3c:45:
16:4c:4e:90:c7:04:f5:47:80:36:94:3e:75:6b:ee:
bb:6d:65:43:f9:c8:16:c2:8a:a8:f7:f5:71:d5:54:
8e:b3:33:b3:cf:40:d9:a9:9f:54:1b:b7:01:e0:d6:
0f:c9:d2:2f:ae:5a:a6:74:e5:e7:03:16:ab:2e:ff:
e5:03:42:af:45:ae:fa:c3:88:2f:60:a2:fa:9b:21:
58:69:bf:22:1c:6a:4d:b2:dd:2b:d3:b0:43:d5:38:
64:4b:5c:3b:1d:07:ac:c5:bc:0b:6f:67:dc:80:65:
71:f3:0d:63:49:20:dc:3d:44:c8:ef:bd:52:2f:49:
97:95:3b:98:43:23:9e:54:e1:ee:e0:fe:12:d8:63:
e5:58:77:85:da:d4:d9:db:f2:ee:d4:78:59:a7:a9:
c0:0a:0d:1f:6e:e3:a5:73:b1:e7:86:73:68:92:a6:
3f:8f:64:db:2f:62:cc:ee:ae:bc:0c:93:ae:33:c6:
32:da:74:bc:ef:f4:4d:5c:29:ec:93:ec:aa:47:4d:
c0:08:87:f7:dc:aa:93:a1:07:e5:29:47:52:a0:2f:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.8.0/22
123.253.24.0/22
IPv6:
2401:c0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:4e:7a:8d:58:69:d9:c8:bc:a0:8a:c2:b8:f1:e4:01:25:f0:
df:6e:4f:06:0d:c5:25:ba:45:94:c2:3b:82:93:d9:ba:32:5c:
6c:09:6a:34:43:e8:e2:f0:f5:d0:ef:f7:14:5d:20:7c:ba:b6:
ec:4f:a0:50:e6:18:77:3e:62:fb:37:7e:f5:f1:6b:97:9a:39:
b9:4f:ea:a2:b6:61:00:dd:7a:2f:e7:e8:41:40:a6:b0:fe:e3:
24:c4:c6:18:ff:ee:55:8a:62:eb:ba:5d:f1:17:d7:2b:c5:01:
d9:52:48:a9:f7:3f:4b:a8:91:56:07:78:b8:6e:8b:9f:fd:8a:
91:21:71:00:12:0a:5c:96:8d:7b:b0:86:c6:b8:65:b9:6e:f4:
64:5f:b3:45:cc:d0:f1:84:97:23:52:3d:ea:90:61:4e:9f:0a:
31:20:1c:2e:f1:8f:4a:cd:23:e6:d6:f8:b2:d1:a7:2a:13:d2:
cc:26:de:33:4a:a6:a7:f7:ab:17:f1:eb:1d:bf:5a:0e:7e:a9:
12:d5:42:87:e0:fa:02:a9:26:6a:f5:b8:e0:3c:98:dd:19:ed:
6f:b9:5b:33:74:8b:3b:23:6d:05:9c:43:59:df:1b:5e:43:18:
50:b7:f3:58:d6:76:c8:46:9c:d9:01:ee:9c:93:64:61:c1:c4:
34:d0:08:70
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDAe+TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUwMjE3NDgwMVoXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQx
OTk0MTBGOUIwOTFCOEZCOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCl4ntxeo0N48aP6CMQehnAr5/osrsXLx/JfQJYcSRKpnLqI96GdoG9Rho8RRZM
TpDHBPVHgDaUPnVr7rttZUP5yBbCiqj39XHVVI6zM7PPQNmpn1QbtwHg1g/J0i+u
WqZ05ecDFqsu/+UDQq9FrvrDiC9govqbIVhpvyIcak2y3SvTsEPVOGRLXDsdB6zF
vAtvZ9yAZXHzDWNJINw9RMjvvVIvSZeVO5hDI55U4e7g/hLYY+VYd4Xa1Nnb8u7U
eFmnqcAKDR9u46VzseeGc2iSpj+PZNsvYszurrwMk64zxjLadLzv9E1cKeyT7KpH
TcAIh/fcqpOhB+UpR1KgL7QLAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUMz7FAwFN
BnSvFnQZlBD5sJG4+5QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcxQTU5LzhBQjkzM0VBMzBDNTExRUM4QTY3QUE3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdG
TkJuU3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAJnWwgDBAJ7/RgwDQQCAAIwBwMFACQBAMAwDQYJKoZIhvcNAQEL
BQADggEBAM1Oeo1YadnIvKCKwrjx5AEl8N9uTwYNxSW6RZTCO4KT2boyXGwJajRD
6OLw9dDv9xRdIHy6tuxPoFDmGHc+Yvs3fvXxa5eaOblP6qK2YQDdei/n6EFAprD+
4yTExhj/7lWKYuu6XfEX1yvFAdlSSKn3P0uokVYHeLhui5/9ipEhcQASClyWjXuw
hsa4Zblu9GRfs0XM0PGElyNSPeqQYU6fCjEgHC7xj0rNI+bW+LLRpyoT0swm3jNK
pqf3qxfx6x2/Wg5+qRLVQofg+gKpJmr1uOA8mN0Z7W+5WzN0izsjbQWcQ1nfG15D
GFC381jWdshGnNkB7pyTZGHBxDTQCHA=
-----END CERTIFICATE-----
Generated at Thu May 9 03:38:25 2024 by rpki-client on console-ams.rpki-client.org