Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
File: sZJ_E4KvyIRDDJZerSibw77GS-w.cer (raw, json)
Hash identifier: 2qbVO5BFtLe3gsNwdm5YbVTobBmWTDR++kX6KpvxcZ4=
Subject key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023446
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Mar 2025 07:24:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152324
IP: 2001:df3:5f40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 07:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144454 (0x23446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 1 07:24:20 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91EC8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:c8:ac:dc:41:e9:f3:80:81:16:8f:82:34:
58:b9:b8:51:89:e9:41:b5:a4:f7:c3:ee:a0:29:f6:
73:f4:dd:35:c1:c3:75:a9:4b:5e:bb:56:83:fe:f8:
fe:c4:59:54:13:4a:00:b0:ed:8b:b8:d4:e5:34:55:
85:ce:89:a7:38:4b:aa:fc:8e:a6:51:39:80:99:be:
95:e9:b1:db:9f:e1:a0:44:26:b1:65:e3:1e:23:19:
fe:28:12:94:4f:9a:bd:a8:7b:91:47:72:9c:0d:30:
38:2e:25:95:23:84:92:ca:e0:bf:55:6f:ca:03:51:
4e:c4:2f:fd:7f:70:1a:be:f2:83:72:02:e6:94:a3:
2c:3b:68:c2:5c:5b:35:f4:a2:41:08:c5:99:7f:cc:
42:fc:54:d7:6e:aa:5c:6e:ab:d8:d9:0a:5b:0e:73:
2f:01:53:07:5a:72:2f:c1:8a:12:4e:a8:fa:5a:4c:
d4:d4:8e:6b:d5:7d:c9:3a:96:96:36:e1:7d:1c:b3:
b4:ef:24:42:2a:34:e1:f4:b2:10:74:b5:00:e1:b6:
64:0a:d0:c4:56:1c:e9:d3:2c:55:aa:42:ad:e0:49:
29:95:e4:ee:86:88:b3:9a:37:34:1e:fb:ca:87:01:
e3:1d:02:ca:81:15:1d:69:0e:5b:1c:50:af:67:e6:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152324
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5f40::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a5:e2:6d:61:a6:73:44:3f:3e:4c:89:b6:6f:3c:da:a1:a8:
c8:c4:2d:5b:19:b3:a3:ff:b7:eb:6e:0a:e4:26:c5:ea:19:cf:
88:cf:fb:db:4c:f3:f6:39:ea:3d:0e:07:13:22:13:d7:be:ca:
6e:fd:22:fd:78:e3:93:1d:37:13:ba:39:89:41:eb:8f:4d:a0:
6e:14:a5:75:e7:a2:c0:42:5b:0d:63:c2:48:51:b0:a8:33:a9:
23:0e:e0:f1:88:d2:c5:f0:ab:99:0c:a5:b5:5d:d6:de:0c:fe:
af:42:b0:a1:2e:5f:23:d4:c8:93:96:bc:3f:dd:70:70:cf:94:
ca:ff:89:a1:24:62:d1:70:d8:19:c1:75:ad:12:e7:86:b9:92:
0a:16:f4:b6:ac:68:f4:f8:bd:21:dd:bc:f4:a4:50:21:f3:e9:
f3:c2:9b:2d:5f:fa:7f:6d:e0:6a:d6:96:fa:dd:00:3b:75:d1:
f9:ee:04:2a:4d:46:06:9c:a6:ef:0e:8e:6b:46:1e:83:cc:39:
31:07:f8:c2:ce:d8:70:ac:05:3a:50:f1:7e:4a:15:7c:8b:1c:
5d:a1:40:6e:ae:6e:2e:20:51:24:e2:1e:e6:fb:aa:96:5f:4c:
43:6e:c1:a4:d1:77:57:2e:8e:b3:6e:17:bd:14:24:1d:2d:67:
02:50:44:54
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAjRGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMwMTA3MjQyMFoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUM4RjcxMTAvBgNVBAUTKEIxOTI3RjEzODJBRkM4ODQ0MzBDOTY1
RUFEMjg5QkMzQkVDNjRCRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/E8is3EHp84CBFo+CNFi5uFGJ6UG1pPfD7qAp9nP03TXBw3WpS167VoP++P7E
WVQTSgCw7Yu41OU0VYXOiac4S6r8jqZROYCZvpXpsduf4aBEJrFl4x4jGf4oEpRP
mr2oe5FHcpwNMDguJZUjhJLK4L9Vb8oDUU7EL/1/cBq+8oNyAuaUoyw7aMJcWzX0
okEIxZl/zEL8VNduqlxuq9jZClsOcy8BUwdaci/BihJOqPpaTNTUjmvVfck6lpY2
4X0cs7TvJEIqNOH0shB0tQDhtmQK0MRWHOnTLFWqQq3gSSmV5O6GiLOaNzQe+8qH
AeMdAsqBFR1pDlscUK9n5gZDAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUsZJ/E4Kv
yIRDDJZerSibw77GS+wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVDOEY3LzgwOTNDMzA4QjJBNTExRUU5MERFQTIyMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQzhGNy84MDkzQzMwOEIyQTUxMUVFOTBERUEyMjBDNEY5QUUwMi9zWkpfRTRL
dnlJUkRESlplclNpYnc3N0dTLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlMEMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN819AMA0G
CSqGSIb3DQEBCwUAA4IBAQCppeJtYaZzRD8+TIm2bzzaoajIxC1bGbOj/7frbgrk
JsXqGc+Iz/vbTPP2Oeo9DgcTIhPXvspu/SL9eOOTHTcTujmJQeuPTaBuFKV156LA
QlsNY8JIUbCoM6kjDuDxiNLF8KuZDKW1XdbeDP6vQrChLl8j1MiTlrw/3XBwz5TK
/4mhJGLRcNgZwXWtEueGuZIKFvS2rGj0+L0h3bz0pFAh8+nzwpstX/p/beBq1pb6
3QA7ddH57gQqTUYGnKbvDo5rRh6DzDkxB/jCzthwrAU6UPF+ShV8ixxdoUBurm4u
IFEk4h7m+6qWX0xDbsGk0XdXLo6zbhe9FCQdLWcCUERU
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:32:40 2025 by rpki-client