Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer (raw, json)
Hash identifier: wXXbUnO88xr7oxQLSktGN0WQPlDh5+MTyjyMU8yLaUY=
Subject key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0229E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jan 2025 12:38:21 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 153340
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141798 (0x229e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 17 12:38:21 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91E5EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:1c:a5:08:08:c6:90:4f:ca:ec:75:fe:93:
fa:e7:84:ce:f5:aa:f6:40:1a:f3:b7:42:21:08:99:
5b:38:bd:6d:c8:5a:38:59:8a:cb:ce:ff:50:f2:4b:
19:2c:17:62:db:f9:14:75:8e:ad:34:2c:f6:df:ca:
e4:6d:45:93:11:dd:4c:80:91:f0:2b:f9:ab:61:f4:
9f:2e:cb:ae:1e:52:b0:f4:17:d3:be:fa:64:eb:61:
99:e1:41:64:27:11:37:d5:49:2f:ee:da:33:86:be:
fe:94:cb:dc:a0:1e:35:5c:4d:86:61:9f:f2:55:bd:
b7:a8:c9:f8:fe:65:0e:51:21:e9:89:3f:2b:47:b7:
1d:ab:54:a8:06:f8:3a:f7:29:4d:f9:59:c2:1f:d9:
b4:43:b6:eb:0c:bc:54:f0:ab:73:81:99:21:c8:40:
7e:9c:ba:fe:8b:48:55:f2:4f:55:41:91:1b:f0:d9:
dc:a3:a7:9d:f3:c5:7a:8f:cb:93:36:16:2f:32:bf:
4c:fe:fa:27:f8:33:4c:34:09:8e:1c:90:d4:f0:b5:
46:83:8a:24:73:04:19:f2:ca:f3:aa:54:c5:16:29:
cc:3f:70:58:42:24:3a:2c:ea:c5:62:ad:e3:d7:e4:
4b:d6:41:59:c6:56:89:08:66:12:41:7f:93:e9:a7:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153340
Signature Algorithm: sha256WithRSAEncryption
b6:9c:f2:ff:ae:b7:0b:b3:60:d4:6e:45:1c:7a:45:10:fd:12:
ee:0a:fd:ec:65:f6:8b:de:5f:bc:42:e5:f4:79:f9:fa:46:47:
41:ed:fc:84:b2:dd:8f:25:b4:be:8a:a2:fc:bb:ea:e8:b4:df:
f8:42:ad:4f:24:e9:68:b5:57:1f:ec:8b:34:e2:a5:01:86:e1:
e2:64:4b:c5:18:34:6a:8f:da:d0:11:fa:6e:ef:e2:8e:04:92:
2b:71:80:07:66:10:97:a8:48:63:dd:e0:52:61:60:ed:5f:e9:
44:97:e0:5f:00:c3:82:94:36:ee:a6:76:ba:7c:25:ee:32:7e:
28:98:49:dc:1a:d2:c6:19:bf:ab:82:e6:cd:72:2d:03:ea:70:
f4:07:23:23:43:6a:50:a8:98:26:b7:fb:41:db:40:f2:21:e5:
a0:99:4e:4e:03:b9:22:33:14:2c:ad:c2:2a:04:15:4d:7d:6a:
7b:6e:07:ae:08:e0:db:d8:5a:d7:ca:18:d7:e8:10:93:bc:8d:
ef:b4:7f:ec:07:5c:80:20:78:14:a8:b5:f6:83:66:74:e9:94:
f7:5b:69:ce:de:52:36:51:c0:7c:44:41:73:2e:95:b5:b3:60:
b2:d9:98:ab:2f:32:41:b4:7b:10:b2:99:59:e2:47:66:44:23:
e6:85:cc:b5
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAinmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDExNzEyMzgyMVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTVFRUExMTAvBgNVBAUTKDg1Nzc5MDRDNDNDMkE5QkUxMThGRERE
NUJBN0JCOEI2MDQ0MzgwRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF7xylCAjGkE/K7HX+k/rnhM71qvZAGvO3QiEImVs4vW3IWjhZisvO/1DySxks
F2Lb+RR1jq00LPbfyuRtRZMR3UyAkfAr+ath9J8uy64eUrD0F9O++mTrYZnhQWQn
ETfVSS/u2jOGvv6Uy9ygHjVcTYZhn/JVvbeoyfj+ZQ5RIemJPytHtx2rVKgG+Dr3
KU35WcIf2bRDtusMvFTwq3OBmSHIQH6cuv6LSFXyT1VBkRvw2dyjp53zxXqPy5M2
Fi8yv0z++if4M0w0CY4ckNTwtUaDiiRzBBnyyvOqVMUWKcw/cFhCJDos6sVirePX
5EvWQVnGVokIZhJBf5Ppp9alAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUhXeQTEPC
qb4Rj93Vunu4tgRDgP4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU1RUVBL0VDQTJDN0Q2RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNUVFQS9FQ0EyQzdENkQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi9oWGVRVEVQ
Q3FiNFJqOTNWdW51NHRnUkRnUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlb8MA0GCSqGSIb3DQEBCwUAA4IBAQC2nPL/rrcLs2DUbkUcekUQ/RLu
Cv3sZfaL3l+8QuX0efn6RkdB7fyEst2PJbS+iqL8u+rotN/4Qq1PJOlotVcf7Is0
4qUBhuHiZEvFGDRqj9rQEfpu7+KOBJIrcYAHZhCXqEhj3eBSYWDtX+lEl+BfAMOC
lDbupna6fCXuMn4omEncGtLGGb+rgubNci0D6nD0ByMjQ2pQqJgmt/tB20DyIeWg
mU5OA7kiMxQsrcIqBBVNfWp7bgeuCODb2FrXyhjX6BCTvI3vtH/sB1yAIHgUqLX2
g2Z06ZT3W2nO3lI2UcB8REFzLpW1s2Cy2ZirLzJBtHsQsplZ4kdmRCPmhcy1
-----END CERTIFICATE-----
Generated at Thu Feb 6 05:48:09 2025 by rpki-client