Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.cer (raw, json)
Hash identifier: WbPzD/Qk8EA/4IOqtsPi38rlUl0jZMFrGkN6Ixpwfgo=
Subject key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0236C8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 20:53:16 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 56198
IP: 103.68.125.0/24
IP: 103.75.175.0/24
IP: 202.0.104.0/24
IP: 2001:df6:bb00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145096 (0x236c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 20:53:16 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D40BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:97:5f:7c:85:bd:fa:a9:7b:63:86:72:7a:
9d:43:f8:ec:48:ed:5f:28:33:b7:d1:8f:59:7b:46:
d5:bd:05:bf:2c:8e:c0:32:0f:5e:9c:e3:13:f1:c0:
29:a6:2d:8d:7d:6e:10:16:d1:b0:72:d4:4b:b6:22:
eb:cc:f2:66:7e:e1:43:27:c7:98:05:a2:39:ff:b4:
01:a1:23:02:7a:0d:cb:f9:e6:26:ea:c2:bc:3b:98:
39:7b:2f:51:e2:c9:41:00:c7:91:2e:47:fb:72:1e:
35:85:22:6e:5d:c6:d1:56:60:4b:80:ce:f1:37:75:
f4:96:ce:3c:2f:2a:86:2b:ed:1d:bd:54:18:8e:97:
c8:80:cf:58:66:c2:00:5f:4d:d1:40:2d:43:60:e4:
78:3a:48:0a:22:bb:ac:18:fa:a9:30:8a:43:94:8e:
d3:ed:72:18:de:7b:1e:95:6f:01:0f:f1:3a:ee:b9:
c9:3a:d0:39:c5:2f:3a:ce:5d:d4:7e:a6:a8:b0:5a:
0f:9f:20:7e:73:f1:64:5a:e4:8b:54:bb:36:77:e8:
85:36:e5:45:ff:3f:c0:ea:5b:6d:f8:98:01:0e:63:
d3:3e:e7:28:bc:c7:69:2c:24:11:d8:13:d9:e0:80:
e1:ae:46:98:6f:57:00:c3:19:d2:83:16:96:ba:a9:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56198
sbgp-ipAddrBlock: critical
IPv4:
103.68.125.0/24
103.75.175.0/24
202.0.104.0/24
IPv6:
2001:df6:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
b0:96:3b:fc:c5:5c:7e:9e:0a:ab:48:ae:50:4c:05:6d:5f:e9:
3d:92:32:87:d5:cd:ab:46:9f:47:25:23:ce:df:d2:d0:19:dc:
60:1d:9f:f4:95:90:56:5a:81:b5:ec:9a:9c:03:75:c8:11:d5:
0d:fd:f3:fd:3b:f3:14:39:e4:e2:c6:0e:38:86:e0:e2:e6:0f:
7e:bb:26:f0:9b:99:5b:85:34:6f:40:15:9f:98:26:4b:e5:6e:
26:c9:3c:8e:eb:14:fc:fa:d8:42:71:b7:3e:d5:42:8f:a6:19:
b7:7c:d2:ae:48:21:c3:46:e3:89:45:74:7a:c4:41:cf:ed:ef:
5c:ea:ab:38:2e:85:71:ff:04:5f:97:dc:1b:77:05:bd:c5:09:
45:5d:34:8d:ff:8c:e2:1b:48:83:9d:da:ca:8b:b7:2f:49:ef:
a7:f6:19:d5:b9:d5:7f:34:f0:f5:28:56:93:9d:28:2a:0b:5d:
6a:c2:0a:58:30:40:1c:d8:b7:cf:6d:67:f6:44:4a:1c:2b:ae:
ea:56:98:6b:2f:6d:0f:8c:f8:e5:9b:47:48:3d:3f:b9:5f:b4:
6e:59:d0:ee:98:af:16:fc:3c:d9:e7:35:a0:c1:f6:af:3f:37:
4c:2b:4a:6a:43:80:b6:07:aa:be:0c:ac:9f:c8:77:fe:10:a4:
0f:6f:40:d5
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAjbIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMxMDIwNTMxNloXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4Mjgx
MzgyN0ZCNzE2RDZFRTkyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMrJdffIW9+ql7Y4Zyep1D+OxI7V8oM7fRj1l7RtW9Bb8sjsAyD16c4xPxwCmm
LY19bhAW0bBy1Eu2IuvM8mZ+4UMnx5gFojn/tAGhIwJ6Dcv55ibqwrw7mDl7L1Hi
yUEAx5EuR/tyHjWFIm5dxtFWYEuAzvE3dfSWzjwvKoYr7R29VBiOl8iAz1hmwgBf
TdFALUNg5Hg6SAoiu6wY+qkwikOUjtPtchjeex6VbwEP8Truuck60DnFLzrOXdR+
pqiwWg+fIH5z8WRa5ItUuzZ36IU25UX/P8DqW234mAEOY9M+5yi8x2ksJBHYE9ng
gOGuRphvVwDDGdKDFpa6qc3rAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUvkY/wZGb
QUKyOCgTgn+3FtbukoMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ0MEJGLzI3QjdBMjg0MjRDMDExRUJCNjJCNDM4N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENDBCRi8yN0I3QTI4NDI0QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pH
YlFVS3lPQ2dUZ24tM0Z0YnVrb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANuGMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAZ0R9AwQAZ0uv
AwQAygBoMA8EAgACMAkDBwAgAQ32uwAwDQYJKoZIhvcNAQELBQADggEBALCWO/zF
XH6eCqtIrlBMBW1f6T2SMofVzatGn0clI87f0tAZ3GAdn/SVkFZagbXsmpwDdcgR
1Q398/078xQ55OLGDjiG4OLmD367JvCbmVuFNG9AFZ+YJkvlbibJPI7rFPz62EJx
tz7VQo+mGbd80q5IIcNG44lFdHrEQc/t71zqqzguhXH/BF+X3Bt3Bb3FCUVdNI3/
jOIbSIOd2sqLty9J76f2GdW51X808PUoVpOdKCoLXWrCClgwQBzYt89tZ/ZEShwr
rupWmGsvbQ+M+OWbR0g9P7lftG5Z0O6Yrxb8PNnnNaDB9q8/N0wrSmpDgLYHqr4M
rJ/Id/4QpA9vQNU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:06:08 2025 by rpki-client