Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer (raw, json)
Hash identifier: pxaIiIySpV8b7ITRn5UCQNR7XsCbroTgi9tuV6L7ouY=
Subject key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0236C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 19:00:28 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 150777
IP: 103.89.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145088 (0x236c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 19:00:28 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91AFB4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:c3:ae:7c:b8:e0:32:71:df:77:88:8a:3f:
12:49:d0:9d:22:c3:3a:70:0f:21:4a:6f:05:34:2e:
4e:48:bc:9a:a5:ba:ae:07:36:aa:e8:f7:05:f9:08:
27:be:01:30:81:39:60:0c:e1:bc:d1:bf:11:e2:b3:
4c:4c:97:11:31:5a:87:08:d0:cd:43:e2:0e:c1:ff:
ed:5d:db:c1:40:13:60:70:a9:80:43:c2:52:4d:71:
f2:33:7a:29:97:f7:eb:46:af:03:e0:84:80:03:58:
7d:18:75:4b:ff:e4:77:8a:4a:72:b6:69:04:61:41:
e9:34:f7:c0:5a:a5:88:68:88:d8:57:1c:3f:d4:37:
ce:8e:9e:39:07:81:f0:fe:28:83:1c:2a:b8:5e:3a:
0b:f5:a5:7a:14:2f:48:49:d4:03:f9:ba:0c:00:92:
e7:2a:85:6b:0c:c9:64:93:6a:5a:59:35:f2:bc:55:
59:62:4e:22:e6:28:9e:9a:6a:c1:4e:6d:21:a6:5c:
38:a9:b7:0e:83:8c:4d:fe:fd:b9:74:81:2f:18:38:
2e:27:ca:6f:cb:69:26:e1:e7:1a:73:2c:62:8f:75:
30:9a:85:c5:54:ba:1c:e5:7d:06:ea:60:b9:2e:5c:
dd:77:2f:99:74:1f:e9:83:f7:8a:c9:fb:fb:e7:25:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150777
sbgp-ipAddrBlock: critical
IPv4:
103.89.240.0/23
Signature Algorithm: sha256WithRSAEncryption
94:88:dc:8a:27:fe:54:ba:84:f8:3b:3e:9a:08:b5:bd:1e:f2:
fb:23:cd:20:83:7c:19:d0:fb:d6:6c:36:44:6d:d7:25:8a:f5:
4d:70:5e:5b:c5:2a:8f:87:7c:59:d7:f1:a4:29:14:98:a2:70:
86:c1:8b:a1:d5:3e:54:bd:ff:a2:24:96:46:f4:dc:5d:16:f1:
ff:70:d0:a3:0c:bc:96:6c:4f:df:50:a4:f5:26:8d:a0:0c:75:
c4:a7:18:cc:ff:08:d3:81:da:62:af:72:8c:48:eb:22:33:ea:
cc:31:ef:c7:86:1e:e7:9f:ee:1e:bc:48:ab:e0:fd:2c:52:83:
2c:e4:0e:00:1e:29:e9:72:4e:2e:ed:17:7c:5a:c3:67:de:2e:
50:91:8b:74:95:f3:83:94:75:6b:12:da:51:64:a1:a7:8e:1e:
6a:e6:7a:5a:8f:c6:f8:f7:29:e7:95:ab:72:34:e7:76:95:11:
dc:d1:6b:77:62:ce:de:b7:7c:77:3a:a3:6b:30:60:34:bf:09:
13:f8:13:a3:c1:28:d3:62:28:ae:83:eb:49:3f:3f:f6:b4:b6:
30:eb:ec:2c:4b:0b:5e:5a:e6:54:f1:2c:fe:b2:3c:02:c2:ec:
f7:46:3c:38:bc:e3:ab:65:a8:34:0e:a9:87:95:99:ae:db:f5:
e1:01:36:f1
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjbAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMxMDE5MDAyOFoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUZCNEMxMTAvBgNVBAUTKDYzNDk3MzU5MDRFMUJDMEQ2NUJENTk0
QTA3NzYyQkI1Mjk5QzAzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjDsOufLjgMnHfd4iKPxJJ0J0iwzpwDyFKbwU0Lk5IvJqluq4HNqro9wX5CCe+
ATCBOWAM4bzRvxHis0xMlxExWocI0M1D4g7B/+1d28FAE2BwqYBDwlJNcfIzeimX
9+tGrwPghIADWH0YdUv/5HeKSnK2aQRhQek098BapYhoiNhXHD/UN86OnjkHgfD+
KIMcKrheOgv1pXoUL0hJ1AP5ugwAkucqhWsMyWSTalpZNfK8VVliTiLmKJ6aasFO
bSGmXDiptw6DjE3+/bl0gS8YOC4nym/LaSbh5xpzLGKPdTCahcVUuhzlfQbqYLku
XN13L5l0H+mD94rJ+/vnJW61AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUY0lzWQTh
vA1lvVlKB3YrtSmcA4owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGQjRDL0M0NzBCMjJBQjI5NzExRUQ5NEVGMDkyNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRkI0Qy9DNDcwQjIyQUIyOTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FU
aHZBMWx2VmxLQjNZcnRTbWNBNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkz5MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1nwMA0GCSqG
SIb3DQEBCwUAA4IBAQCUiNyKJ/5UuoT4Oz6aCLW9HvL7I80gg3wZ0PvWbDZEbdcl
ivVNcF5bxSqPh3xZ1/GkKRSYonCGwYuh1T5Uvf+iJJZG9NxdFvH/cNCjDLyWbE/f
UKT1Jo2gDHXEpxjM/wjTgdpir3KMSOsiM+rMMe/Hhh7nn+4evEir4P0sUoMs5A4A
Hinpck4u7Rd8WsNn3i5QkYt0lfODlHVrEtpRZKGnjh5q5npaj8b49ynnlatyNOd2
lRHc0Wt3Ys7et3x3OqNrMGA0vwkT+BOjwSjTYiiug+tJPz/2tLYw6+wsSwteWuZU
8Sz+sjwCwuz3Rjw4vOOrZag0DqmHlZmu2/XhATbx
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:36 2025 by rpki-client