Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.cer (raw, json)
Hash identifier: 5DiIhJW7qGR7xcDyRngdbLzebeN8ldw42mvcGe/HGfU=
Subject key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 19:53:28 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 136418
IP: 202.47.164.0/23
IP: 2001:df3:2440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139185 (0x21fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 19:53:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9196CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:54:f0:47:58:0e:45:47:1a:8e:07:cc:e2:
96:d1:8c:e9:37:1b:39:d0:2a:af:8d:2e:a3:31:fa:
30:30:e7:d4:97:9b:68:fd:27:27:18:e1:64:9b:06:
ce:bf:b0:81:72:f5:f9:68:28:fc:a0:5a:ab:71:9f:
69:51:e3:67:58:20:f4:6a:54:03:d3:97:57:22:43:
8d:71:80:f1:99:31:b1:22:e0:43:73:f7:04:30:96:
0f:6a:a0:7a:08:5f:f4:d8:32:2d:d9:ee:70:23:ce:
74:fe:05:df:a4:88:de:ff:38:8e:90:2f:79:08:11:
8a:c1:e9:da:59:50:c8:6c:82:28:0a:3c:18:2f:86:
d0:52:dc:74:4f:5c:bf:5d:cc:bf:b4:ff:24:8e:99:
2f:86:7e:71:44:ce:66:68:38:dd:44:03:34:0a:b8:
3f:05:df:68:f2:f5:5c:66:1a:c4:55:f6:4a:f4:05:
ec:fd:38:32:cd:87:00:42:53:74:a9:f1:e2:91:28:
0a:fa:9b:cd:8c:20:f9:e4:9e:ab:a0:89:ad:c6:e4:
a8:e7:5f:f3:a2:bb:67:d8:2f:68:1a:c0:5c:2d:74:
8e:57:95:b2:98:9a:d8:52:8e:bb:c9:1a:73:f3:ad:
17:ac:01:3b:60:76:1c:5e:b6:dc:71:52:17:db:a3:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136418
sbgp-ipAddrBlock: critical
IPv4:
202.47.164.0/23
IPv6:
2001:df3:2440::/48
Signature Algorithm: sha256WithRSAEncryption
52:aa:5b:4c:55:00:a8:c7:21:dc:94:64:99:52:42:0c:db:16:
9f:8c:ff:e4:24:c0:1d:c9:b5:d9:c2:cf:48:b1:e3:0b:36:f2:
e6:3a:af:d3:36:3a:98:39:a5:0d:98:66:47:00:a6:5c:82:cc:
bf:37:15:38:ef:7a:a8:8b:22:d9:44:da:6d:06:66:c3:80:be:
92:22:32:39:74:b8:fb:ff:d3:a2:eb:8e:d1:32:44:21:ea:61:
50:15:ff:69:a5:13:bf:5e:28:bc:9a:9b:ed:80:88:b5:2c:0a:
be:08:bc:64:fd:3c:9c:11:22:24:c5:4d:5e:ab:e7:a7:f4:15:
f4:bd:67:c1:c9:88:46:e5:d3:66:df:69:8a:9a:99:7d:02:88:
07:fc:02:fd:15:8f:86:66:40:bb:b5:06:71:60:75:e6:b8:84:
e6:fd:0b:a4:83:20:d0:64:4d:36:70:8e:bc:8a:43:83:06:47:
35:8a:c0:9b:cc:9b:f1:08:9e:24:66:a6:0d:c2:53:ea:c3:1c:
b1:9b:2e:ef:3d:45:61:b6:ab:c9:1d:36:44:53:a3:aa:37:cf:
e0:a3:bb:a5:ff:35:29:44:7b:fd:b2:f2:04:41:60:a5:0b:bc:
a0:fc:ec:da:c8:b1:bc:42:7f:cc:29:5f:13:63:77:6e:a9:33:
fb:da:b0:d9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAh+xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMjE5NTMyOFoXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUw
MTYwRUVGMDYwOTYwNjUzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrVlTwR1gORUcajgfM4pbRjOk3GznQKq+NLqMx+jAw59SXm2j9JycY4WSbBs6/
sIFy9floKPygWqtxn2lR42dYIPRqVAPTl1ciQ41xgPGZMbEi4ENz9wQwlg9qoHoI
X/TYMi3Z7nAjznT+Bd+kiN7/OI6QL3kIEYrB6dpZUMhsgigKPBgvhtBS3HRPXL9d
zL+0/ySOmS+GfnFEzmZoON1EAzQKuD8F32jy9VxmGsRV9kr0Bez9ODLNhwBCU3Sp
8eKRKAr6m82MIPnknqugia3G5KjnX/Oiu2fYL2gawFwtdI5XlbKYmthSjrvJGnPz
rResATtgdhxettxxUhfbo9jrAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPNcVUq+q
ATj5pk4BYO7wYJYGUyMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2Q0UxL0U4ODFFOEVDODJCNjExRUU5QkZDMDYxREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEt
cUFUajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhTiMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByi+kMA8EAgAC
MAkDBwAgAQ3zJEAwDQYJKoZIhvcNAQELBQADggEBAFKqW0xVAKjHIdyUZJlSQgzb
Fp+M/+QkwB3JtdnCz0ix4ws28uY6r9M2Opg5pQ2YZkcAplyCzL83FTjveqiLItlE
2m0GZsOAvpIiMjl0uPv/06LrjtEyRCHqYVAV/2mlE79eKLyam+2AiLUsCr4IvGT9
PJwRIiTFTV6r56f0FfS9Z8HJiEbl02bfaYqamX0CiAf8Av0Vj4ZmQLu1BnFgdea4
hOb9C6SDINBkTTZwjryKQ4MGRzWKwJvMm/EIniRmpg3CU+rDHLGbLu89RWG2q8kd
NkRTo6o3z+Cju6X/NSlEe/2y8gRBYKULvKD87NrIsbxCf8wpXxNjd26pM/vasNk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:17 2025 by rpki-client