Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
File: TQJNfuk78G548gwtl4XADK7tbkQ.cer (raw, json)
Hash identifier: 5S52nPHHIPKr5OtpfHSivysW4hKobJijXZ36JeRU6fo=
Subject key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022342
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 13:28:30 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.126.136.0/22
IP: 2406:b2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140098 (0x22342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 13:28:30 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9134B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:aa:f2:a8:1d:82:79:0b:9d:45:33:0a:46:
3b:66:bf:f0:78:9e:76:f1:e5:65:ea:ad:f8:51:e4:
2d:91:8f:1e:1b:8d:ce:08:49:73:a0:9e:a3:e2:33:
a3:02:08:de:6f:16:c6:db:48:68:33:57:c4:cd:ef:
af:a3:45:4e:3f:2c:d9:8a:d0:e9:c2:95:59:20:fe:
9a:43:00:16:66:ca:19:8c:fb:8c:91:26:44:0f:c7:
eb:bb:8f:d7:1b:74:12:65:80:97:2b:33:88:e4:72:
b4:9a:fc:cd:14:52:92:ba:d8:28:02:d0:04:99:b1:
fe:4b:e4:6c:0b:0b:d0:2c:77:87:3d:02:33:c1:ed:
6c:a5:98:34:87:20:a2:2e:e1:d6:49:d5:18:85:86:
83:e8:5c:52:25:3b:11:53:5f:3f:61:be:56:a1:73:
af:d3:d6:28:84:23:a2:d5:59:c7:09:8c:e9:40:1e:
32:c0:f8:72:bb:dd:b1:f8:14:d1:3e:e0:e2:9c:22:
93:32:af:5f:52:53:89:38:06:6a:7d:5d:98:0b:65:
00:2d:95:33:4b:92:03:41:05:06:f6:c0:c5:21:d2:
6a:65:47:e5:9e:32:d5:0f:21:e2:dc:03:d4:d3:83:
a4:c7:ae:ff:ec:3a:9b:6d:56:df:05:a0:c0:a1:c6:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.136.0/22
IPv6:
2406:b2c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d1:6e:7d:47:30:50:77:d4:2f:db:bb:2b:c1:4e:cd:97:c7:
65:27:6d:50:42:96:c1:98:a8:e9:96:c9:9d:27:12:b8:c6:0f:
5b:fa:83:41:60:39:6f:c2:4b:5f:3d:58:ec:5c:08:f5:aa:a4:
c2:23:73:d3:f2:97:1d:07:f4:5b:70:de:c9:ad:81:29:56:5b:
83:87:a8:ca:b2:3d:b0:43:f4:e8:b3:15:b4:12:2e:c9:da:9b:
46:56:32:fa:6c:db:da:51:fa:e5:42:c8:69:84:d7:d8:d6:e2:
1a:3c:36:54:57:14:65:bf:e6:ba:68:19:41:4a:63:60:5e:02:
20:a2:0b:de:a9:b6:13:96:bc:7e:b3:b1:1e:6d:06:a4:63:93:
1d:41:e8:2b:a6:22:d8:78:f7:45:3a:05:04:bc:aa:52:74:e3:
5a:73:3d:c0:de:22:65:a9:23:13:f7:c7:15:da:a8:ad:25:46:
87:a2:1d:d4:86:1b:39:7f:4c:4f:88:e0:cb:1f:5b:ea:e2:32:
d0:0d:f9:13:8f:db:71:4a:b4:39:31:3e:15:48:9b:d3:4f:69:
ab:a7:0a:25:53:f7:b2:af:7d:e3:f9:c5:95:db:0e:33:04:3d:
0a:a0:e6:4b:b9:c6:cd:4a:02:ec:72:a0:06:a4:f4:a0:1b:7e:
56:12:e5:58
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAiNCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxODEzMjgzMFoXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMy
RDk3ODVDMDBDQUVFRDZFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE26ryqB2CeQudRTMKRjtmv/B4nnbx5WXqrfhR5C2Rjx4bjc4ISXOgnqPiM6MC
CN5vFsbbSGgzV8TN76+jRU4/LNmK0OnClVkg/ppDABZmyhmM+4yRJkQPx+u7j9cb
dBJlgJcrM4jkcrSa/M0UUpK62CgC0ASZsf5L5GwLC9Asd4c9AjPB7WylmDSHIKIu
4dZJ1RiFhoPoXFIlOxFTXz9hvlahc6/T1iiEI6LVWccJjOlAHjLA+HK73bH4FNE+
4OKcIpMyr19SU4k4Bmp9XZgLZQAtlTNLkgNBBQb2wMUh0mplR+WeMtUPIeLcA9TT
g6THrv/sOpttVt8FoMChxpT3AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUTQJNfuk7
8G548gwtl4XADK7tbkQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM0Qjg4LzJFMzNGOEIwMUZFMzExRUI5ODc4RUM2NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVr
NzhHNTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnfogwDQQCAAIwBwMFACQGssAwDQYJKoZIhvcNAQELBQADggEB
ACzRbn1HMFB31C/buyvBTs2Xx2UnbVBClsGYqOmWyZ0nErjGD1v6g0FgOW/CS189
WOxcCPWqpMIjc9Pylx0H9Ftw3smtgSlWW4OHqMqyPbBD9OizFbQSLsnam0ZWMvps
29pR+uVCyGmE19jW4ho8NlRXFGW/5rpoGUFKY2BeAiCiC96pthOWvH6zsR5tBqRj
kx1B6CumIth490U6BQS8qlJ041pzPcDeImWpIxP3xxXaqK0lRoeiHdSGGzl/TE+I
4MsfW+riMtAN+ROP23FKtDkxPhVIm9NPaaunCiVT97KvfeP5xZXbDjMEPQqg5ku5
xs1KAuxyoAak9KAbflYS5Vg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:37 2025 by rpki-client