Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
File: ZmruIMmoyx9DEkGPHiBXqoprxPs.cer (raw, json)
Hash identifier: JuiyRnhsoB9ltx40j3sPy92FCNT1B+uakGk+OsYadYA=
Subject key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C2E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 11:24:23 +0000
Certificate not after: Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 138352
IP: 103.180.10.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146478 (0x23c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 11:24:23 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=A91E9FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:b8:31:96:98:0f:20:ce:6c:1d:29:54:9c:
1f:be:53:75:82:49:b4:7b:5d:cc:9f:f7:38:bd:ab:
88:c7:88:df:5c:d3:29:4f:66:64:e8:a0:52:54:d8:
c6:ca:3f:47:fb:6f:b7:66:da:27:44:96:57:98:aa:
a0:21:8e:03:25:61:11:d6:96:9d:0a:6c:d0:ac:40:
28:9e:3b:a8:48:5c:03:eb:64:52:05:e6:ac:6d:8d:
c1:14:e7:cf:36:57:34:56:d0:a0:8d:71:64:49:c1:
25:08:58:1e:a1:6e:75:20:17:46:b7:88:e7:c8:2d:
c2:ac:0a:ca:5c:68:23:9e:b1:9d:fb:d2:e4:54:17:
68:3d:e4:b5:3d:bf:e9:ba:20:d0:f2:f3:04:8a:69:
93:06:ca:98:54:c4:85:37:8d:6e:c5:e4:16:71:b1:
3f:5c:df:e0:32:95:cf:6f:f8:10:bc:9d:88:a5:99:
4a:af:41:85:32:4a:89:cd:8a:44:d6:9e:b4:2e:56:
4f:ab:4b:e6:77:d6:57:21:a1:df:5c:68:06:b1:c0:
ab:c5:03:dc:38:9e:ad:0c:b9:04:66:bc:01:8f:a4:
f5:54:69:30:10:bd:c6:a8:db:aa:55:7e:17:17:fd:
0f:5a:10:ef:2b:44:9a:26:c3:79:83:fc:cc:49:50:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138352
sbgp-ipAddrBlock: critical
IPv4:
103.180.10.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3f:2c:e8:08:db:35:43:a8:11:03:fc:cb:00:69:fa:20:21:
fa:6e:d3:fd:e0:87:2e:2f:06:de:33:14:26:cc:17:02:c9:cf:
90:c9:e4:ed:34:af:92:b0:9a:f5:f9:1e:67:b7:36:50:1f:77:
2c:d7:a5:09:ef:d3:2b:2e:44:1d:7f:b1:50:25:86:9f:2f:08:
bc:4a:36:c5:c1:27:76:4e:1c:70:07:2c:43:bb:17:47:95:84:
f9:02:bc:c9:d7:52:cb:5b:10:4f:81:db:2b:6e:eb:ab:a2:e0:
b1:19:f9:b3:3d:25:ca:cf:5d:45:5f:f8:de:b6:c4:35:e7:37:
58:f4:de:ed:f1:d7:ac:6f:58:ee:68:de:30:be:db:3e:2a:69:
52:18:cf:49:dd:3c:b6:b1:4c:50:36:64:ed:b5:c2:e3:3a:6a:
e2:bd:9b:e9:ca:b9:f9:f7:fe:c1:12:85:10:41:bb:de:c8:7e:
0d:6a:01:32:a8:5a:88:87:f3:47:2b:2c:d3:fc:a1:a5:29:58:
a6:7c:39:61:d3:03:eb:ac:63:27:cb:0d:d2:ac:59:eb:54:dd:
fd:0b:3d:f1:91:48:f0:ad:e1:f3:74:31:af:5e:1d:20:f2:43:
e8:f1:b0:ea:e6:0b:62:70:de:63:34:f3:b8:45:4d:5e:56:db:
5f:d6:6d:0f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjwuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQwMjExMjQyM1oXDTI1MDgwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTlGQzAxMTAvBgNVBAUTKDY2NkFFRTIwQzlBOENCMUY0MzEyNDE4
RjFFMjA1N0FBOEE2QkM0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSUrgxlpgPIM5sHSlUnB++U3WCSbR7Xcyf9zi9q4jHiN9c0ylPZmTooFJU2MbK
P0f7b7dm2idElleYqqAhjgMlYRHWlp0KbNCsQCieO6hIXAPrZFIF5qxtjcEU5882
VzRW0KCNcWRJwSUIWB6hbnUgF0a3iOfILcKsCspcaCOesZ370uRUF2g95LU9v+m6
INDy8wSKaZMGyphUxIU3jW7F5BZxsT9c3+Aylc9v+BC8nYilmUqvQYUySonNikTW
nrQuVk+rS+Z31lchod9caAaxwKvFA9w4nq0MuQRmvAGPpPVUaTAQvcao26pVfhcX
/Q9aEO8rRJomw3mD/MxJUJrjAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUZmruIMmo
yx9DEkGPHiBXqoprxPswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU5RkMwLzBFNDU4MDdDODI2QzExRUNCRDM5OEI1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOUZDMC8wRTQ1ODA3QzgyNkMxMUVDQkQzOThCNThDNEY5QUUwMi9abXJ1SU1t
b3l4OURFa0dQSGlCWHFvcHJ4UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhxwMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7QKMA0GCSqG
SIb3DQEBCwUAA4IBAQAzPyzoCNs1Q6gRA/zLAGn6ICH6btP94IcuLwbeMxQmzBcC
yc+QyeTtNK+SsJr1+R5ntzZQH3cs16UJ79MrLkQdf7FQJYafLwi8SjbFwSd2Thxw
ByxDuxdHlYT5ArzJ11LLWxBPgdsrbuurouCxGfmzPSXKz11FX/jetsQ15zdY9N7t
8desb1juaN4wvts+KmlSGM9J3Ty2sUxQNmTttcLjOmrivZvpyrn59/7BEoUQQbve
yH4NagEyqFqIh/NHKyzT/KGlKVimfDlh0wPrrGMnyw3SrFnrVN39Cz3xkUjwreHz
dDGvXh0g8kPo8bDq5gticN5jNPO4RU1eVttf1m0P
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:29 2025 by rpki-client