Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer (raw, json)
Hash identifier: 8z9fVDJSDRfDdcyfoaFj5ZhHACcNRQAWL4G1TFt6vy8=
Subject key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220F6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 22:55:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 9301
AS: 10083
AS: 18405
AS: 38276
AS: 55519
IP: 122.200.160.0/20
IP: 203.4.162.0/24
IP: 203.5.127.0/24
IP: 203.31.57.0/24
IP: 203.31.101.0/24
IP: 203.33.71.0/24
IP: 203.55.18.0/24
IP: 203.57.78.0/23
IP: 2402:5600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139510 (0x220f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 5 22:55:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91F6FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:9b:97:43:ed:7c:69:ed:89:05:19:39:5a:
84:4a:1f:ef:59:42:79:93:c3:93:93:05:43:5a:45:
25:f7:cc:55:f3:a9:96:02:8e:f1:80:a9:ab:60:0c:
48:80:9c:63:83:08:da:72:93:d3:39:7b:78:f5:26:
f7:6f:2e:80:f1:65:9d:ff:18:91:9e:37:84:0f:ce:
45:53:df:75:f2:27:56:7f:45:66:62:33:ad:d4:ac:
9c:b2:be:55:4c:72:77:52:b4:06:08:79:8c:97:36:
3d:a9:21:ad:2e:83:2c:0b:cc:14:b2:6e:45:09:de:
a2:68:fe:b0:b0:73:0d:4a:d8:70:19:84:c5:b1:27:
72:86:0b:81:23:e3:21:9d:35:3e:05:18:75:cb:d7:
12:71:13:79:0b:a1:a3:2e:44:cd:eb:0b:2f:8c:20:
92:7f:8a:1d:96:10:67:4e:67:24:75:38:7a:a1:57:
3f:00:75:f3:08:86:4b:72:99:4c:11:71:dc:63:ee:
ea:79:bd:bb:c9:71:cb:15:99:32:83:1f:a7:12:1a:
d0:2c:91:8e:03:03:ea:a2:2c:54:7f:3e:c8:a3:08:
5a:79:0c:bf:8a:7a:30:b7:6e:41:47:df:cc:9b:5d:
31:97:05:89:58:fd:84:c1:29:30:92:80:ba:94:d2:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9301
10083
18405
38276
55519
sbgp-ipAddrBlock: critical
IPv4:
122.200.160.0/20
203.4.162.0/24
203.5.127.0/24
203.31.57.0/24
203.31.101.0/24
203.33.71.0/24
203.55.18.0/24
203.57.78.0/23
IPv6:
2402:5600::/32
Signature Algorithm: sha256WithRSAEncryption
6e:28:9a:72:fb:25:bc:b2:32:39:d7:df:72:c7:61:4e:24:c8:
0a:e9:8c:64:d4:f0:5b:be:2e:0f:4b:09:13:32:ef:93:ee:c0:
0b:92:7d:4b:db:ca:bf:af:eb:df:2d:e4:34:41:f5:ae:d7:ea:
ae:7d:eb:ab:23:f7:06:ac:28:ce:ba:16:64:2f:12:16:53:a5:
f2:95:b4:b5:b2:1d:b3:1d:60:11:c5:d7:76:f8:b0:b4:bd:ee:
4f:6a:18:e9:6c:4f:ff:ae:8b:e6:6d:82:14:2d:08:5e:b8:7d:
bd:8d:d8:e7:c3:f1:e7:73:6b:b2:6d:02:27:11:35:d7:a0:77:
66:fc:4e:db:f5:bb:c3:31:a4:1f:5a:96:e3:c2:c2:4c:ac:6b:
a9:ec:07:e4:49:37:bc:78:3f:7b:37:ee:0b:3e:70:0d:9f:8a:
f4:11:94:01:71:fe:91:24:17:e2:c8:ad:74:fa:59:6b:ad:b9:
cf:56:d1:dc:da:e9:01:49:1d:7e:df:4a:91:36:a7:30:6e:40:
ce:4f:71:15:42:19:78:f2:67:4d:01:c5:5b:cb:a9:0a:10:2e:
70:62:07:f9:c7:c0:4a:2f:45:61:c8:ec:8f:81:f7:fd:03:b1:
d5:a5:60:9a:b1:cb:35:db:6a:41:5d:39:4f:c7:7a:f2:ba:cd:
4e:e3:65:84
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIDAiD2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwNTIyNTUxMVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4
MENGNDg4OEY3RDQ2MDU4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvm5uXQ+18ae2JBRk5WoRKH+9ZQnmTw5OTBUNaRSX3zFXzqZYCjvGAqatgDEiA
nGODCNpyk9M5e3j1JvdvLoDxZZ3/GJGeN4QPzkVT33XyJ1Z/RWZiM63UrJyyvlVM
cndStAYIeYyXNj2pIa0ugywLzBSybkUJ3qJo/rCwcw1K2HAZhMWxJ3KGC4Ej4yGd
NT4FGHXL1xJxE3kLoaMuRM3rCy+MIJJ/ih2WEGdOZyR1OHqhVz8AdfMIhktymUwR
cdxj7up5vbvJccsVmTKDH6cSGtAskY4DA+qiLFR/PsijCFp5DL+KejC3bkFH38yb
XTGXBYlY/YTBKTCSgLqU0v4VAgMBAAGjggNZMIIDVTAdBgNVHQ4EFgQUZgJZdrdf
XCn0LB2Az0iI99RgWNcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY2RkMzL0ZDOTA3ODAyMUQ5MjExRTJCM0JDMkNGNjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJk
ZlhDbjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQgBAf8EHDAa
oBgwFgICJFUCAidjAgJH5QIDAJWEAgMA2N8wWAYIKwYBBQUHAQcBAf8ESTBHMDYE
AgABMDADBAR6yKADBADLBKIDBADLBX8DBADLHzkDBADLH2UDBADLIUcDBADLNxID
BAHLOU4wDQQCAAIwBwMFACQCVgAwDQYJKoZIhvcNAQELBQADggEBAG4omnL7Jbyy
MjnX33LHYU4kyArpjGTU8Fu+Lg9LCRMy75PuwAuSfUvbyr+v698t5DRB9a7X6q59
66sj9wasKM66FmQvEhZTpfKVtLWyHbMdYBHF13b4sLS97k9qGOlsT/+ui+ZtghQt
CF64fb2N2OfD8edza7JtAicRNdegd2b8Ttv1u8MxpB9aluPCwkysa6nsB+RJN7x4
P3s37gs+cA2fivQRlAFx/pEkF+LIrXT6WWutuc9W0dza6QFJHX7fSpE2pzBuQM5P
cRVCGXjyZ00BxVvLqQoQLnBiB/nHwEovRWHI7I+B9/0DsdWlYJqxyzXbakFdOU/H
evK6zU7jZYQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:18 2025 by rpki-client