
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
File: rUR6Z_B-gc0JwyLs0QrZQWvESys.cer (raw, json)
Hash identifier: uAAZT7Iaa4FERE8u8TU+Rjm3TSnNS7dLNWoBK4AHq5Q=
Subject key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4A34
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Feb 2025 17:38:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 193.149.153.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18996 (0x4a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 3 17:38:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9188EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:76:a9:af:c2:24:c2:28:ae:3a:27:20:6d:
70:a2:01:79:33:b4:66:20:51:07:56:02:bd:e5:6c:
12:7a:0b:98:ef:2e:a3:13:da:1e:15:3e:2f:d4:c9:
a7:7d:93:6c:21:84:03:8f:91:af:3d:4b:10:2d:d6:
27:f0:8e:d1:a6:13:d8:d2:4b:f1:42:1d:b7:c2:49:
c4:a7:2b:ff:85:03:58:41:69:03:d5:51:74:7f:f1:
1a:91:0f:84:db:8a:12:c8:cb:32:8e:cf:60:c8:4f:
cc:5e:6c:e1:55:bc:0f:50:d2:52:12:31:a7:fc:b0:
1b:c5:d4:c0:3f:32:f2:c0:18:be:7d:cd:78:e9:3e:
2f:92:c7:84:d5:9e:da:41:e6:6f:fa:b2:cb:88:f9:
7a:03:57:a1:fe:30:94:44:39:2c:16:ae:8c:4e:1e:
7d:9d:f4:e9:1f:51:27:d8:ef:09:e8:60:31:ad:b6:
6b:d3:a2:2b:7b:3d:3b:0d:85:06:b3:45:44:db:fc:
c8:22:3e:09:76:18:ba:04:8c:f6:44:90:0a:7a:89:
a0:cb:35:69:29:ac:0a:96:8e:b4:10:57:e6:29:83:
d4:94:75:af:7d:e9:5f:9c:f0:df:cb:6f:7a:d7:91:
19:88:ba:29:d3:4a:18:07:9a:f9:5b:d8:21:f7:a6:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:55:67:26:ca:9e:1a:14:61:0e:80:ac:6a:42:5a:a9:dd:
63:ca:8a:4b:72:32:6d:17:e9:0b:19:26:1c:82:e8:94:6c:44:
05:68:48:07:e4:9f:5d:86:36:12:fd:f9:47:77:b9:25:ce:66:
fa:52:c0:53:47:62:8b:06:6f:0f:76:96:26:fd:e0:0f:f3:58:
d6:0d:e2:5f:9a:a3:18:78:58:67:52:f8:f8:30:de:3e:83:8b:
89:d3:c8:2f:cb:ca:04:19:c6:9c:e5:fa:0d:3c:03:c6:fd:95:
13:de:91:45:a1:c2:f8:70:72:c0:9a:fb:7c:aa:7f:a8:1e:90:
e4:8d:9d:a0:13:c9:16:1b:17:eb:fd:d3:5b:aa:c5:8c:15:f9:
46:07:f3:24:1e:a8:35:d2:60:d6:06:7a:f2:63:8c:da:46:1d:
50:17:22:e2:6b:96:4e:2e:8a:1a:b0:7c:20:59:69:34:1d:17:
86:fb:88:8f:9c:7c:c4:61:a6:78:64:75:74:f7:f1:66:82:2c:
ba:86:16:ff:5e:c7:fd:0f:1f:5a:67:0c:5c:eb:d0:15:48:b0:
73:96:1d:c2:24:c5:44:81:18:d2:24:f7:c2:f2:81:af:20:a6:
88:70:4a:fb:d2:8b:74:0a:9e:16:be:85:20:5f:d5:16:55:7e:
47:76:e0:9b
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICSjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwMjAzMTczODM0WhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4OEVCNjExMC8GA1UEBRMoQUQ0NDdBNjdGMDdFODFDRDA5QzMyMkVD
RDEwQUQ5NDE2QkM0NEIyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANbedqmvwiTCKK46JyBtcKIBeTO0ZiBRB1YCveVsEnoLmO8uoxPaHhU+L9TJp32T
bCGEA4+Rrz1LEC3WJ/CO0aYT2NJL8UIdt8JJxKcr/4UDWEFpA9VRdH/xGpEPhNuK
EsjLMo7PYMhPzF5s4VW8D1DSUhIxp/ywG8XUwD8y8sAYvn3NeOk+L5LHhNWe2kHm
b/qyy4j5egNXof4wlEQ5LBaujE4efZ306R9RJ9jvCehgMa22a9OiK3s9Ow2FBrNF
RNv8yCI+CXYYugSM9kSQCnqJoMs1aSmsCpaOtBBX5imD1JR1r33pX5zw38tveteR
GYi6KdNKGAea+VvYIfemG40CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBStRHpn8H6B
zQnDIuzRCtlBa8RLKzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhFQjYvOUMwRUY4M0E3NEVDMTFFQzkzRjgxQTMzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4RUI2LzlDMEVGODNBNzRFQzExRUM5M0Y4MUEzM0M0RjlBRTAyL3JVUjZaX0It
Z2MwSnd5THMwUXJaUVd2RVN5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMGVmTANBgkqhkiG9w0BAQsFAAOCAQEAkvdVZybKnhoUYQ6ArGpC
WqndY8qKS3IybRfpCxkmHILolGxEBWhIB+SfXYY2Ev35R3e5Jc5m+lLAU0diiwZv
D3aWJv3gD/NY1g3iX5qjGHhYZ1L4+DDePoOLidPIL8vKBBnGnOX6DTwDxv2VE96R
RaHC+HBywJr7fKp/qB6Q5I2doBPJFhsX6/3TW6rFjBX5RgfzJB6oNdJg1gZ68mOM
2kYdUBci4muWTi6KGrB8IFlpNB0XhvuIj5x8xGGmeGR1dPfxZoIsuoYW/17H/Q8f
WmcMXOvQFUiwc5YdwiTFRIEY0iT3wvKBryCmiHBK+9KLdAqeFr6FIF/VFlV+R3bg
mw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:58:29 2025 by rpki-client