Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
File: YBqj_Udwv8aa8kBvLoDtCOfca0M.cer (raw, json)
Hash identifier: prpAGKKnPPYLOHvkjZSitd8wI9hWmwP/PAUjGTmf77Q=
Subject key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0234D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Mar 2025 08:04:57 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 152731
IP: 202.50.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144593 (0x234d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 3 08:04:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91954E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:cc:73:81:7d:2e:01:ad:ba:bd:73:15:c4:
cf:89:45:81:0f:8b:ca:4a:5d:d6:08:35:9a:95:a1:
1b:dc:52:e4:8d:cd:a2:d5:6a:e6:11:75:0f:39:b7:
2f:9c:41:2a:54:62:a9:bf:11:9d:1a:2d:e6:58:a8:
32:a7:28:25:9d:7c:9b:83:51:11:cb:c5:73:c0:67:
21:22:ac:bf:1e:af:e4:d2:97:29:03:9c:06:ca:fe:
31:db:d8:6e:11:30:14:12:ea:04:bc:10:1a:69:0d:
b5:10:f7:f1:33:11:33:ff:f9:70:2a:04:7e:7c:96:
69:f7:ff:05:f5:18:17:c8:00:d4:8f:b4:02:23:7a:
35:da:eb:2a:17:02:54:fa:2c:e7:44:40:b2:c1:2e:
18:8b:d5:b3:c9:cf:c9:67:87:54:43:d9:f2:a9:fd:
12:c1:84:ba:c1:32:36:81:7b:18:de:1f:7f:0b:1a:
ff:33:ae:de:3d:bf:0a:53:09:df:fc:86:bc:e1:cc:
aa:e3:dd:da:5b:65:93:6c:ed:f7:98:46:07:14:30:
3f:f9:a0:78:49:13:c6:b2:49:74:c8:71:b2:c3:bf:
b0:07:c9:99:9e:d5:75:a9:e9:00:0f:20:06:ce:00:
a1:14:76:4b:d4:21:b6:92:68:01:ce:4d:57:6b:e8:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152731
sbgp-ipAddrBlock: critical
IPv4:
202.50.129.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:ba:f9:f4:3d:6a:69:23:9f:a3:32:d8:09:b6:e7:b5:b0:
b2:1f:25:07:d2:56:b6:7f:4c:69:7b:68:e6:9e:80:d2:c6:3e:
14:00:43:4c:4e:a1:87:4e:b7:63:ba:7e:6e:83:57:b3:c2:60:
17:f2:8b:d5:8d:d5:f0:09:e2:0e:44:53:20:e9:50:2e:0e:68:
1e:27:0c:4f:0c:e0:1a:75:58:c0:b8:87:a4:00:9a:80:fd:42:
5e:4a:c4:a9:c0:50:d1:d1:f8:69:ac:71:be:66:76:fd:6f:87:
0f:7e:cd:b3:46:de:28:bc:b9:7d:57:a4:70:ae:0c:f3:4e:7a:
12:7b:7a:2f:54:e0:d9:c3:70:ea:8f:b9:70:88:f2:79:15:ec:
2b:5a:d4:3b:f0:62:1e:8a:2e:7b:18:08:79:89:8e:1c:bd:b0:
40:50:13:5e:98:97:d9:00:e7:d1:78:03:61:c9:3d:14:f7:36:
01:8d:8f:10:64:8c:fa:04:0f:68:9c:d4:06:49:f1:87:09:e4:
83:0a:d8:59:0a:c9:0a:75:bd:c2:80:c5:74:1a:cb:93:69:ca:
99:c9:5d:d8:07:59:b0:ed:56:8c:9b:ae:71:44:24:b5:71:bb:
fb:c2:e9:a6:f4:ef:42:fe:ca:92:66:c2:b5:4a:3f:7e:01:d0:
22:1d:e0:07
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjTRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMwMzA4MDQ1N1oXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2
RjJFODBFRDA4RTdEQzZCNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcHcxzgX0uAa26vXMVxM+JRYEPi8pKXdYINZqVoRvcUuSNzaLVauYRdQ85ty+c
QSpUYqm/EZ0aLeZYqDKnKCWdfJuDURHLxXPAZyEirL8er+TSlykDnAbK/jHb2G4R
MBQS6gS8EBppDbUQ9/EzETP/+XAqBH58lmn3/wX1GBfIANSPtAIjejXa6yoXAlT6
LOdEQLLBLhiL1bPJz8lnh1RD2fKp/RLBhLrBMjaBexjeH38LGv8zrt49vwpTCd/8
hrzhzKrj3dpbZZNs7feYRgcUMD/5oHhJE8aySXTIcbLDv7AHyZme1XWp6QAPIAbO
AKEUdkvUIbaSaAHOTVdr6D8HAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUYBqj/Udw
v8aa8kBvLoDtCOfca0MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk1NEUyLzczRUJFNkEyMzQ2RjExRUY5N0NBNzU0NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vk
d3Y4YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlSbMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyjKBMA0GCSqG
SIb3DQEBCwUAA4IBAQAE6br59D1qaSOfozLYCbbntbCyHyUH0la2f0xpe2jmnoDS
xj4UAENMTqGHTrdjun5ug1ezwmAX8ovVjdXwCeIORFMg6VAuDmgeJwxPDOAadVjA
uIekAJqA/UJeSsSpwFDR0fhprHG+Znb9b4cPfs2zRt4ovLl9V6RwrgzzTnoSe3ov
VODZw3Dqj7lwiPJ5FewrWtQ78GIeii57GAh5iY4cvbBAUBNemJfZAOfReANhyT0U
9zYBjY8QZIz6BA9onNQGSfGHCeSDCthZCskKdb3CgMV0GsuTacqZyV3YB1mw7VaM
m65xRCS1cbv7wumm9O9C/sqSZsK1Sj9+AdAiHeAH
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:35 2025 by rpki-client