Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer
File: S36_c0WWAv2-dyvz4uxQsutKf2E.cer (raw, json)
Hash identifier: 8zMTyZHpqWoqzbPNv9mvLC+ZzBqvrbHwKuYl9pwsKmw=
Subject key identifier: 4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0238D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Mar 2025 04:43:09 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 152481
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145624 (0x238d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 21 04:43:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91754C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:cc:c9:49:ec:b5:16:4c:69:4f:d0:99:2e:
09:ad:1f:42:a2:ec:b2:7b:a0:e0:7e:56:4a:ab:ab:
e7:73:4f:3e:5e:90:70:8f:02:91:82:c5:69:b5:45:
d8:26:0e:bf:1d:60:4d:c4:e3:8a:49:f4:6d:0c:9c:
65:f3:da:8d:f0:c5:9c:21:e9:4f:e2:c0:0a:00:96:
fc:94:aa:1b:cc:64:34:59:92:ae:8f:f6:6a:d7:56:
8c:16:72:87:c7:b9:ee:a0:66:06:65:74:7d:aa:7d:
52:93:82:6b:8f:2c:58:92:ce:8d:42:40:6b:f6:65:
d5:26:0b:69:fe:8b:cb:03:9b:b2:e2:ba:1e:6f:93:
14:c6:ca:7f:62:a3:0e:2b:e6:e0:f0:7a:a6:4c:cd:
5f:36:91:82:77:47:e0:ed:e5:07:92:8e:d9:1b:9c:
a8:31:4b:fd:86:a0:e9:19:9e:69:1c:7d:df:7e:02:
d0:65:7e:1e:27:ed:0f:33:1d:20:5a:ca:7b:1d:08:
58:a5:e2:ad:85:97:66:f9:03:57:84:b6:d9:59:bc:
ff:f7:4a:9b:06:4d:44:db:37:70:9b:d1:f3:a9:bb:
8a:5b:92:04:f9:9f:80:56:ab:93:6b:f3:5d:83:fd:
82:fd:a3:81:07:8e:6b:49:3b:6c:2a:b2:32:b0:71:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152481
Signature Algorithm: sha256WithRSAEncryption
7d:b2:82:cc:18:19:aa:ab:bf:a1:f3:2a:a9:56:a1:f0:da:36:
f1:78:04:ef:ec:09:74:d9:24:bd:f6:05:6d:69:e4:f5:f2:b3:
ac:83:6e:5a:70:22:a2:ab:a4:af:88:26:36:74:ce:a4:29:5f:
34:36:06:ab:ab:d8:20:42:ee:47:6d:00:ed:1e:a4:22:0a:bd:
72:b7:b0:e9:8f:1b:de:3b:ad:64:81:ab:1c:70:67:cc:1e:63:
4f:f6:3c:c7:a7:ee:9a:a4:54:e9:63:0e:10:9e:12:6d:e8:88:
ca:4b:a4:57:1c:8c:0b:01:a9:22:c8:93:79:52:3d:06:f1:64:
c5:61:ab:bc:ef:04:43:d0:2e:aa:96:4b:c5:d7:9d:11:a2:18:
3e:29:0c:1c:de:4a:48:0a:3d:f7:74:55:65:56:12:52:62:eb:
82:97:98:ba:e5:fa:3c:62:0d:09:1d:e5:aa:8e:f6:6d:a8:ae:
28:ff:79:4f:62:b5:63:e3:61:9b:a9:c4:c1:e8:17:21:1f:16:
8e:a2:15:7d:73:ca:b8:f8:1d:93:cb:2b:da:31:67:f6:35:33:
c3:41:76:73:37:39:63:40:ef:3b:9e:5b:de:a9:c6:fe:d0:4d:
33:20:37:50:55:1a:be:16:42:69:8f:9d:69:e5:83:ac:4c:73:
1c:b5:71:9e
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAjjYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyMTA0NDMwOVoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzU0QzAxMTAvBgNVBAUTKDRCN0VCRjczNDU5NjAyRkRCRTc3MkJG
M0UyRUM1MEIyRUI0QTdGNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsuMzJSey1FkxpT9CZLgmtH0Ki7LJ7oOB+Vkqrq+dzTz5ekHCPApGCxWm1Rdgm
Dr8dYE3E44pJ9G0MnGXz2o3wxZwh6U/iwAoAlvyUqhvMZDRZkq6P9mrXVowWcofH
ue6gZgZldH2qfVKTgmuPLFiSzo1CQGv2ZdUmC2n+i8sDm7Liuh5vkxTGyn9iow4r
5uDweqZMzV82kYJ3R+Dt5QeSjtkbnKgxS/2GoOkZnmkcfd9+AtBlfh4n7Q8zHSBa
ynsdCFil4q2Fl2b5A1eEttlZvP/3SpsGTUTbN3Cb0fOpu4pbkgT5n4BWq5Nr812D
/YL9o4EHjmtJO2wqsjKwcfAXAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUS36/c0WW
Av2+dyvz4uxQsutKf2EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc1NEMwLzA4NkMxQzgyQ0NCQzExRUU4QTBGNzc0OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NTRDMC8wODZDMUM4MkNDQkMxMUVFOEEwRjc3NDhDNEY5QUUwMi9TMzZfYzBX
V0F2Mi1keXZ6NHV4UXN1dEtmMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlOhMA0GCSqGSIb3DQEBCwUAA4IBAQB9soLMGBmqq7+h8yqpVqHw2jbx
eATv7Al02SS99gVtaeT18rOsg25acCKiq6SviCY2dM6kKV80Ngarq9ggQu5HbQDt
HqQiCr1yt7DpjxveO61kgasccGfMHmNP9jzHp+6apFTpYw4QnhJt6IjKS6RXHIwL
AakiyJN5Uj0G8WTFYau87wRD0C6qlkvF150Rohg+KQwc3kpICj33dFVlVhJSYuuC
l5i65fo8Yg0JHeWqjvZtqK4o/3lPYrVj42GbqcTB6BchHxaOohV9c8q4+B2Tyyva
MWf2NTPDQXZzNzljQO87nlveqcb+0E0zIDdQVRq+FkJpj51p5YOsTHMctXGe
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:37 2025 by rpki-client