Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer (raw, json)
Hash identifier: xiJSuLT6vxYuplyvED4UNWFxwEvESeKZV3Y+dRDHexA=
Subject key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023659
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Mar 2025 18:37:31 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 152726
IP: 202.50.113.0/24
IP: 2001:df3:bec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144985 (0x23659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 18:37:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91B80C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:6a:4b:8a:19:9f:d1:bc:6d:aa:47:60:90:
50:c8:68:1d:dc:c9:5f:2d:4d:10:b5:22:1d:87:79:
a1:68:6c:ad:a0:11:40:db:63:15:d4:aa:a6:98:45:
6c:41:d8:0b:1f:5e:6a:ab:f9:32:5a:82:4d:e7:3d:
75:96:8c:bc:93:61:65:be:da:70:e1:33:8b:3b:5e:
fb:1e:81:c8:66:3c:8e:f5:8f:d8:7c:ce:28:9c:28:
bd:38:5f:e8:4c:65:af:fd:62:ee:37:fa:b4:0d:36:
4c:7c:5b:5e:78:ec:5d:fe:ca:73:3e:7a:7e:43:0f:
8b:a7:aa:4e:23:e0:dc:45:77:f5:6c:2f:7a:55:b3:
f2:86:d7:34:f3:d4:8f:91:99:46:38:12:fd:d1:5f:
f3:82:68:2c:38:11:9d:20:a3:2b:3f:9b:ff:fe:79:
89:98:3c:16:ee:98:8a:31:d2:90:cd:e8:b5:b6:5d:
a7:e4:34:55:51:5c:d4:9a:e5:40:44:6f:2a:5a:62:
59:01:54:8e:12:11:61:05:85:3b:55:81:4b:45:43:
58:88:4d:c5:9c:18:8b:2c:6e:b9:3c:50:f6:07:ec:
c4:a2:79:d2:cf:be:ef:eb:88:58:8c:52:d8:e7:58:
d1:1a:9e:d9:80:48:b5:f8:3b:21:20:32:50:cc:13:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152726
sbgp-ipAddrBlock: critical
IPv4:
202.50.113.0/24
IPv6:
2001:df3:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
0e:87:6d:94:31:8e:7e:bf:4c:ad:de:5e:db:d7:b6:d7:d3:21:
51:c0:1c:41:0b:42:e1:65:c4:5d:8c:c8:59:59:8c:59:d5:76:
89:69:85:39:e1:3e:f3:1e:fe:f5:21:d8:95:f5:9c:4b:fe:fe:
5f:bf:7d:50:a2:8a:18:d9:51:a2:a3:03:49:4e:c0:dd:c5:2c:
d7:27:f0:a0:ea:94:cd:d0:f9:83:16:c4:ed:98:5d:8b:b6:f7:
da:a2:bd:f1:4f:29:60:94:ed:4b:c4:ad:71:e7:0e:ba:ba:b2:
6c:c5:a1:32:2c:b3:2e:62:09:53:05:f5:2b:a6:48:51:01:6a:
8d:0e:a2:a9:a3:50:68:9a:2b:91:3c:eb:0b:8a:9c:0f:a4:85:
7d:cc:b2:d6:4f:58:46:58:3d:02:37:f9:19:d8:e3:89:a1:c8:
e5:08:ed:04:01:5a:47:79:7b:07:b7:8b:fc:ae:95:33:da:f5:
2e:11:4a:92:63:97:12:fd:fe:78:ae:d4:53:46:2c:e6:3e:da:
6d:2b:2f:c5:b0:0f:e3:19:6b:0a:63:bc:82:52:09:26:95:e0:
34:dd:d2:9e:8f:0d:2c:c7:e8:a7:43:73:60:85:06:01:c4:76:
6b:f3:37:91:5c:15:67:fa:4b:8b:8b:96:66:e9:ef:69:36:43:
85:bf:0c:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:21 2025 by rpki-client