Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer
File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer (raw, json)
Hash identifier: TkbYYnzbq4CYNP1hGy6C67CZNkO7bBpFXgcnHgdarzM=
Subject key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FF5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Dec 2024 04:48:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152301
IP: 2001:df3:54c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139253 (0x21ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 3 04:48:24 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91A4EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:68:82:75:77:20:1e:fb:4b:7c:ba:3e:3c:
93:fa:1b:40:21:bb:a0:d3:a8:dc:11:c9:9a:5e:c8:
72:d2:c1:88:c5:d7:95:67:f6:88:b4:4a:83:fb:4d:
aa:40:b7:27:b7:72:88:20:b0:c7:21:78:b5:6d:9a:
ed:ea:3c:88:0c:6e:66:87:41:03:9e:8b:c5:30:56:
27:8f:f7:51:d7:d6:ba:85:56:21:38:39:ce:59:a5:
be:e1:35:b4:0a:3b:cc:f7:0c:e5:49:30:55:27:2e:
b7:dc:63:9a:51:93:e9:6f:06:0d:bc:76:74:49:79:
cb:0b:04:89:61:41:4b:52:82:0b:97:dc:3f:3b:c0:
29:9b:b9:42:51:52:6d:f8:6e:58:4d:2b:0f:9e:9f:
71:2f:e0:cc:4c:25:36:43:31:93:29:94:ae:9b:d6:
3a:6a:4e:3f:da:e7:7b:e4:c5:a8:a1:a9:a6:70:8b:
9f:e5:00:99:b2:56:46:a3:6f:63:5c:2e:ec:86:f5:
10:60:12:62:d4:61:c0:16:77:5d:5d:4c:24:c2:d2:
06:88:b1:01:17:12:40:96:1e:df:3b:7e:bd:b8:24:
c4:11:c1:63:dd:c6:f8:57:6b:6f:52:da:09:2f:4b:
50:0e:75:b2:be:c0:8d:8b:fc:3e:48:46:27:a3:01:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152301
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:54c0::/48
Signature Algorithm: sha256WithRSAEncryption
5e:68:60:ac:2d:e2:10:23:b7:f7:6f:79:0a:47:b4:ad:38:68:
b3:42:42:a3:f3:19:80:73:63:40:41:dc:8a:5f:67:ba:7a:5a:
37:e2:08:c8:6b:8a:74:93:53:15:d0:a3:45:03:b8:05:70:39:
2d:fb:a6:8d:06:05:f5:c4:d1:1e:7d:fd:de:cd:62:3e:ce:33:
21:f5:3b:b8:73:4a:ca:4e:30:0a:a0:a8:d7:9f:11:0d:0c:f4:
11:a2:d0:06:7f:de:4e:73:66:7f:41:c2:c0:6b:d1:f4:ae:a1:
ae:73:84:74:16:4b:74:8b:12:8e:09:46:d1:66:ef:3f:ab:6b:
aa:0e:0f:52:a9:30:0a:1c:3a:17:f0:d6:46:7e:98:51:54:e3:
d9:4a:fd:68:e2:9e:41:89:b8:1a:c7:47:eb:ae:30:c5:46:37:
c5:8a:df:ae:c4:63:bb:4e:2d:ef:48:0f:ee:25:ac:a2:a3:cd:
53:20:13:fc:e1:64:34:f7:3a:05:0a:ba:2d:56:2d:e8:71:fe:
90:6d:b0:f6:22:d9:6e:e3:b6:67:52:7a:26:67:a8:41:19:17:
17:cd:d1:6d:bf:f8:c9:a9:e5:89:d1:ad:99:d9:53:9b:cf:2a:
30:62:98:7e:2b:f3:44:f5:1d:5f:75:2e:0d:8d:9f:29:5d:1c:
27:d8:59:9b
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAh/1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMzA0NDgyNFoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZG
MTNFOUU4NjBEMEFDNjc3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6C2iCdXcgHvtLfLo+PJP6G0Ahu6DTqNwRyZpeyHLSwYjF15Vn9oi0SoP7TapA
tye3coggsMcheLVtmu3qPIgMbmaHQQOei8UwVieP91HX1rqFViE4Oc5Zpb7hNbQK
O8z3DOVJMFUnLrfcY5pRk+lvBg28dnRJecsLBIlhQUtSgguX3D87wCmbuUJRUm34
blhNKw+en3Ev4MxMJTZDMZMplK6b1jpqTj/a53vkxaihqaZwi5/lAJmyVkajb2Nc
LuyG9RBgEmLUYcAWd11dTCTC0gaIsQEXEkCWHt87fr24JMQRwWPdxvhXa29S2gkv
S1AOdbK+wI2L/D5IRiejAQmPAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUKsU+JiAv
S8vBSAbxPp6GDQrGd/kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE0RUY5LzdFOUUyM0Y4RDEzNzExRUVBQTlGMTk4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlB
dlM4dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlLtMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN81TAMA0G
CSqGSIb3DQEBCwUAA4IBAQBeaGCsLeIQI7f3b3kKR7StOGizQkKj8xmAc2NAQdyK
X2e6elo34gjIa4p0k1MV0KNFA7gFcDkt+6aNBgX1xNEeff3ezWI+zjMh9Tu4c0rK
TjAKoKjXnxENDPQRotAGf95Oc2Z/QcLAa9H0rqGuc4R0Fkt0ixKOCUbRZu8/q2uq
Dg9SqTAKHDoX8NZGfphRVOPZSv1o4p5Bibgax0frrjDFRjfFit+uxGO7Ti3vSA/u
Jayio81TIBP84WQ09zoFCrotVi3ocf6QbbD2Itlu47ZnUnomZ6hBGRcXzdFtv/jJ
qeWJ0a2Z2VObzyowYph+K/NE9R1fdS4NjZ8pXRwn2Fmb
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:43 2025 by rpki-client