Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
File: g7x91dFCfoM0DS32wztiPUPX7KQ.cer (raw, json)
Hash identifier: 0Sw7/KrP5BtSE7FE3knLegJhqkqpuNEwl35fmfDwyOE=
Subject key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02267E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 12:32:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 135006
IP: 59.152.32.0/22
IP: 103.205.120.0/22
IP: 2402:64c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140926 (0x2267e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 1 12:32:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A911B468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:0a:ae:34:58:dc:90:b6:31:ce:e2:d7:4f:
d7:77:7c:51:9d:e5:06:de:89:a1:2c:f0:31:14:c2:
fc:f7:40:a4:41:f7:99:70:a6:de:b7:fa:c2:6d:14:
34:02:01:93:3e:20:c3:d1:22:cc:8f:4b:23:81:3e:
bc:74:ff:96:6c:30:e6:29:0f:ad:4e:dd:1e:7c:8d:
89:d2:5c:b3:84:08:eb:bf:74:cc:bf:f0:01:97:e2:
5e:10:b5:2b:c7:85:14:b5:9f:51:58:63:4a:42:70:
62:11:49:30:bd:c8:44:9b:d9:09:ff:0e:fc:72:5e:
6e:e5:21:6e:04:b6:df:bd:3c:e1:07:a7:89:2d:d1:
ce:23:fa:08:e3:0b:5a:12:86:88:24:14:76:15:4b:
05:4a:51:e9:73:b3:3b:6e:48:8e:d7:92:a1:4c:c2:
8f:8c:d1:5c:81:10:42:bf:21:1c:00:45:10:7e:15:
94:ad:3b:de:f1:4e:94:2f:50:3d:9f:e2:4b:4d:f7:
b4:de:cd:b7:75:ba:ed:be:83:a0:70:97:35:9f:e9:
94:db:b2:46:e4:cf:b3:c9:90:43:28:b9:45:6d:de:
4d:a2:46:9c:36:a1:7a:40:34:5f:92:54:a4:9f:49:
d5:9c:86:90:a2:e4:c3:1a:3a:88:14:7f:6f:71:fd:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135006
sbgp-ipAddrBlock: critical
IPv4:
59.152.32.0/22
103.205.120.0/22
IPv6:
2402:64c0::/32
Signature Algorithm: sha256WithRSAEncryption
cb:18:8f:26:60:77:23:c6:e4:71:8e:8e:9e:b5:a3:c0:0e:9d:
08:34:b3:72:56:70:7b:74:dc:44:44:af:01:3d:ce:9a:31:bd:
2c:bb:83:33:b1:e7:27:d3:d9:a1:63:25:61:aa:3c:88:c8:a1:
95:66:7e:43:31:a6:06:1c:23:20:19:65:5b:cf:86:39:03:d8:
21:0f:66:e9:a0:5e:67:96:06:d7:e5:fd:85:2b:ed:15:63:64:
ad:2b:ee:cd:d8:e2:ae:94:57:8f:da:6e:e7:9a:71:ca:f8:12:
3d:54:b2:eb:72:b6:c7:1b:0b:d8:16:87:2e:c9:3f:e2:17:b5:
f0:37:cf:de:41:f3:70:93:e6:b5:72:69:fd:27:28:cf:9a:ba:
d7:2f:00:e0:4a:45:99:8c:94:5c:36:cc:cf:1c:19:34:86:84:
c4:d0:77:b3:c1:40:23:67:46:93:fc:db:23:15:45:dc:67:55:
bb:f0:4c:6f:01:d6:c0:4d:fa:48:0d:9a:18:50:1d:a7:6c:8d:
29:49:d0:17:6c:5a:47:a3:7b:97:9a:af:f6:c7:75:f0:76:ae:
b0:b2:5e:9c:ab:a9:ed:b9:e6:5e:ed:47:2a:dd:ca:90:7d:f7:
e8:11:0b:90:c4:5e:ea:54:6e:42:4f:40:3c:75:21:6c:97:80:
69:87:08:23
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAiZ+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEwMTEyMzI1M1oXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRG
NkMzM0I2MjNENDNEN0VDQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxKAquNFjckLYxzuLXT9d3fFGd5QbeiaEs8DEUwvz3QKRB95lwpt63+sJtFDQC
AZM+IMPRIsyPSyOBPrx0/5ZsMOYpD61O3R58jYnSXLOECOu/dMy/8AGX4l4QtSvH
hRS1n1FYY0pCcGIRSTC9yESb2Qn/DvxyXm7lIW4Ett+9POEHp4kt0c4j+gjjC1oS
hogkFHYVSwVKUelzsztuSI7XkqFMwo+M0VyBEEK/IRwARRB+FZStO97xTpQvUD2f
4ktN97Tezbd1uu2+g6BwlzWf6ZTbskbkz7PJkEMouUVt3k2iRpw2oXpANF+SVKSf
SdWchpCi5MMaOogUf29x/XyvAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUg7x91dFC
foM0DS32wztiPUPX7KQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFCNDY4LzgxMjI2MDI4OTExQjExRTk5MzAwRkU1N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRG
Q2ZvTTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg9eMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCO5ggAwQCZ814
MA0EAgACMAcDBQAkAmTAMA0GCSqGSIb3DQEBCwUAA4IBAQDLGI8mYHcjxuRxjo6e
taPADp0INLNyVnB7dNxERK8BPc6aMb0su4Mzsecn09mhYyVhqjyIyKGVZn5DMaYG
HCMgGWVbz4Y5A9ghD2bpoF5nlgbX5f2FK+0VY2StK+7N2OKulFeP2m7nmnHK+BI9
VLLrcrbHGwvYFocuyT/iF7XwN8/eQfNwk+a1cmn9JyjPmrrXLwDgSkWZjJRcNszP
HBk0hoTE0HezwUAjZ0aT/NsjFUXcZ1W78ExvAdbATfpIDZoYUB2nbI0pSdAXbFpH
o3uXmq/2x3Xwdq6wsl6cq6ntueZe7Ucq3cqQfffoEQuQxF7qVG5CT0A8dSFsl4Bp
hwgj
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:52:32 2025 by rpki-client