
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
File: vHDzdLcox7cRwkpoJ_dHekKyKk0.cer (raw, json)
Hash identifier: 7KfJS9e4qhcN0Y7SEr47O61nF+UmzjJDpjUW53nu98A=
Subject key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0233B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Feb 2025 18:37:50 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 153622
IP: 163.61.188.0/23
IP: 2001:df5:1dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144307 (0x233b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 27 18:37:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9142A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:8b:eb:cc:5a:32:c1:97:bf:27:9d:ab:f4:
75:e6:d3:97:24:aa:23:71:65:cd:bf:8e:4d:57:5b:
fb:02:b3:06:8f:4d:50:d5:0d:6e:f0:3d:49:9c:e1:
80:ef:d6:c4:c7:30:bf:9f:73:b2:14:fc:c5:ea:53:
f6:d0:ad:02:eb:e3:87:d1:61:ad:59:08:bb:28:a0:
12:dd:84:6d:ea:60:e5:3b:9f:8a:87:12:b3:33:dd:
b6:45:58:38:90:59:d9:8c:cc:41:63:d4:59:75:79:
f3:e0:0c:b4:c3:ce:69:60:fe:2d:f6:23:0c:de:f3:
4a:d5:a3:34:e8:29:20:c8:7a:5f:77:f1:09:ae:19:
66:0e:38:a1:81:1d:08:6a:8a:53:57:86:24:cb:53:
71:65:d6:b2:56:0e:b4:7f:c7:38:b1:22:73:48:8b:
54:68:49:58:25:2d:3b:bc:f9:51:f3:8f:3d:59:86:
41:7e:43:c5:d9:62:de:1b:bf:da:7c:02:0d:6d:91:
5e:0c:84:76:de:7f:eb:ed:c3:af:99:55:a8:be:fd:
3a:5b:18:98:f5:9a:0f:eb:7b:f4:71:27:62:3a:88:
fd:28:08:64:3f:2e:0b:cb:79:94:8a:43:f8:df:28:
50:46:74:e3:c5:26:91:78:4f:31:de:ca:29:da:5a:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153622
sbgp-ipAddrBlock: critical
IPv4:
163.61.188.0/23
IPv6:
2001:df5:1dc0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:91:19:49:4d:90:41:ec:97:e1:5e:dd:c7:08:b9:45:d5:29:
35:d1:73:e4:b8:85:5e:24:93:c1:b2:c8:2e:11:15:9e:bc:da:
62:6c:79:4b:45:27:b7:21:fc:d1:f4:d3:fe:80:62:59:06:02:
4e:3f:df:4f:f8:68:af:ae:70:f4:b2:36:52:68:49:62:91:9b:
d4:68:3c:19:33:18:0f:13:a6:68:5f:13:06:b3:2f:af:16:ba:
35:7c:86:a3:75:76:cc:ba:75:e8:0c:61:cd:24:35:0f:37:5a:
86:d8:b9:f2:3d:54:de:1f:da:f5:80:d8:87:0a:e8:69:07:26:
2a:85:f1:65:0d:c5:0f:bb:09:ab:a5:0b:55:1c:87:f4:4f:36:
62:2a:6f:29:f8:59:f1:d6:f1:05:eb:6d:dc:3a:0d:f0:d7:60:
23:9d:ee:92:3b:30:36:9e:17:c2:dd:f8:dd:99:9e:3f:00:24:
00:b6:7d:cb:d5:d4:e6:70:62:39:8e:d3:8e:9a:32:e3:fb:03:
d2:fd:73:11:5a:fb:25:bd:5d:aa:1e:6c:2e:4e:44:ce:0c:f9:
a2:e8:4b:8f:b6:5a:7d:96:a9:3e:30:05:8c:c6:f4:74:57:08:
f2:11:66:62:26:7a:28:58:6a:da:d8:87:b9:8c:8c:c5:9a:98:
94:da:07:53
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjOzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIyNzE4Mzc1MFoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDJBNzUxMTAvBgNVBAUTKEJDNzBGMzc0QjcyOEM3QjcxMUMyNEE2
ODI3Rjc0NzdBNDJCMjJBNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/TovrzFoywZe/J52r9HXm05ckqiNxZc2/jk1XW/sCswaPTVDVDW7wPUmc4YDv
1sTHML+fc7IU/MXqU/bQrQLr44fRYa1ZCLsooBLdhG3qYOU7n4qHErMz3bZFWDiQ
WdmMzEFj1Fl1efPgDLTDzmlg/i32Iwze80rVozToKSDIel938QmuGWYOOKGBHQhq
ilNXhiTLU3Fl1rJWDrR/xzixInNIi1RoSVglLTu8+VHzjz1ZhkF+Q8XZYt4bv9p8
Ag1tkV4MhHbef+vtw6+ZVai+/TpbGJj1mg/re/RxJ2I6iP0oCGQ/LgvLeZSKQ/jf
KFBGdOPFJpF4TzHeyinaWngnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUvHDzdLco
x7cRwkpoJ/dHekKyKk0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyQTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MkE3NS9FRjVDRDZEQUY1MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExj
b3g3Y1J3a3BvSl9kSGVrS3lLazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlgWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoz28MA8EAgAC
MAkDBwAgAQ31HcAwDQYJKoZIhvcNAQELBQADggEBAFuRGUlNkEHsl+Fe3ccIuUXV
KTXRc+S4hV4kk8GyyC4RFZ682mJseUtFJ7ch/NH00/6AYlkGAk4/30/4aK+ucPSy
NlJoSWKRm9RoPBkzGA8TpmhfEwazL68WujV8hqN1dsy6degMYc0kNQ83WobYufI9
VN4f2vWA2IcK6GkHJiqF8WUNxQ+7CaulC1Uch/RPNmIqbyn4WfHW8QXrbdw6DfDX
YCOd7pI7MDaeF8Ld+N2Znj8AJAC2fcvV1OZwYjmO046aMuP7A9L9cxFa+yW9Xaoe
bC5ORM4M+aLoS4+2Wn2WqT4wBYzG9HRXCPIRZmImeihYatrYh7mMjMWamJTaB1M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:58 2025 by rpki-client