![](/console.gif)
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
File: mPVq6odEo9Few5KtBtYIN3BGJUE.cer (raw, json)
Hash identifier: 0i2EQWKX9a0wDDaBkoqlt5uCxnvN1z+gIL5CSSuoVmI=
Subject key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0227AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Jan 2025 23:53:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 136997
IP: 103.175.244.0/23
IP: 2001:df0:640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141229 (0x227ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 6 23:53:19 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D774B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:51:3d:58:ee:b7:05:d0:7b:49:c3:5b:d7:
32:8b:9e:ab:9d:b8:f3:59:d2:c6:03:ca:ca:52:84:
11:29:77:31:15:b3:29:58:59:b7:fb:91:a6:16:fe:
44:d1:d4:37:1b:49:b6:f9:8d:78:37:2c:af:e0:94:
29:1e:b1:e8:e3:99:76:a0:f1:36:1b:b1:a6:b9:f6:
82:12:fa:72:a8:cf:f7:7f:ba:17:0d:a3:ad:92:20:
b2:d7:30:88:2a:5b:7e:c3:58:c0:ce:eb:fd:f0:0a:
68:59:d2:01:76:9b:53:4d:90:8e:3c:01:e1:6c:72:
eb:b6:7c:d7:d3:dd:68:f0:c4:51:65:1f:e8:e6:da:
84:1d:3d:e2:d6:b4:c9:5c:f3:49:18:84:36:69:05:
18:89:3a:f0:cd:a0:68:c7:c1:bb:8c:12:df:ac:60:
e5:c3:bb:15:8a:20:59:61:e8:31:ee:f3:99:38:50:
57:6c:51:86:7a:c0:9c:5c:63:73:f3:f6:a0:cc:9d:
96:a6:b4:ee:81:52:49:83:d2:09:05:9f:2d:88:66:
1e:24:bb:7c:64:b4:60:be:e3:55:48:59:56:0c:07:
9c:45:45:28:86:24:7b:22:4a:8a:0f:a1:8b:c1:05:
b3:02:04:9d:d9:d0:9b:90:17:7d:04:6c:40:e8:f1:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136997
sbgp-ipAddrBlock: critical
IPv4:
103.175.244.0/23
IPv6:
2001:df0:640::/48
Signature Algorithm: sha256WithRSAEncryption
65:d0:be:e8:b8:09:8b:ea:ad:9b:63:71:51:7a:a9:cc:5a:ad:
6a:f8:08:9e:e4:7c:b4:28:fb:24:83:0f:df:25:7c:21:73:f7:
e7:54:71:e8:e2:ef:58:33:da:33:8c:9e:86:ef:f7:24:2a:cf:
f6:f3:c0:43:9f:6b:62:a7:d4:a8:f3:a9:73:bf:7a:60:d1:72:
d6:a4:2f:da:ec:67:6d:7d:ef:65:09:e1:ad:15:54:44:d6:e5:
9d:d6:b1:5b:3f:d3:68:fa:4c:91:f8:87:31:8d:58:60:87:4a:
28:3b:b4:58:0c:fa:82:90:d7:cf:24:97:ec:83:8e:e8:80:9c:
ae:fe:40:13:a2:a7:ff:97:4e:92:cd:04:f5:c3:d6:70:97:9e:
8b:ca:26:76:1a:b6:50:b8:44:7b:59:bf:14:09:64:5e:f5:58:
a9:a9:c7:53:c5:d5:80:f3:17:0a:eb:cc:b5:ae:f7:6d:4b:96:
45:7d:ef:0a:98:0d:7e:50:42:64:be:2b:0f:b5:04:f2:96:6e:
b0:8f:84:a7:0f:b1:62:56:ed:f5:09:9d:a8:78:68:ed:32:97:
5a:53:ab:ae:33:9e:9c:90:49:9c:b9:0c:f3:57:28:b3:4c:3e:
60:30:96:2c:87:44:b6:b5:c6:31:09:e0:d9:3a:f8:6d:81:74:
91:54:53:08
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAietMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEwNjIzNTMxOVoXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJB
RDA2RDYwODM3NzA0NjI1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDR4lE9WO63BdB7ScNb1zKLnquduPNZ0sYDyspShBEpdzEVsylYWbf7kaYW/kTR
1DcbSbb5jXg3LK/glCkesejjmXag8TYbsaa59oIS+nKoz/d/uhcNo62SILLXMIgq
W37DWMDO6/3wCmhZ0gF2m1NNkI48AeFscuu2fNfT3WjwxFFlH+jm2oQdPeLWtMlc
80kYhDZpBRiJOvDNoGjHwbuMEt+sYOXDuxWKIFlh6DHu85k4UFdsUYZ6wJxcY3Pz
9qDMnZamtO6BUkmD0gkFny2IZh4ku3xktGC+41VIWVYMB5xFRSiGJHsiSooPoYvB
BbMCBJ3Z0JuQF30EbEDo8SU/AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUmPVq6odE
o9Few5KtBtYIN3BGJUEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ3NzRCLzhGQUIyMTY2NDNCMTExRUM5QTUxQTUyRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9k
RW85RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhclMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6/0MA8EAgAC
MAkDBwAgAQ3wBkAwDQYJKoZIhvcNAQELBQADggEBAGXQvui4CYvqrZtjcVF6qcxa
rWr4CJ7kfLQo+ySDD98lfCFz9+dUceji71gz2jOMnobv9yQqz/bzwEOfa2Kn1Kjz
qXO/emDRctakL9rsZ21972UJ4a0VVETW5Z3WsVs/02j6TJH4hzGNWGCHSig7tFgM
+oKQ188kl+yDjuiAnK7+QBOip/+XTpLNBPXD1nCXnovKJnYatlC4RHtZvxQJZF71
WKmpx1PF1YDzFwrrzLWu921LlkV97wqYDX5QQmS+Kw+1BPKWbrCPhKcPsWJW7fUJ
nah4aO0yl1pTq64znpyQSZy5DPNXKLNMPmAwliyHRLa1xjEJ4Nk6+G2BdJFUUwg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:40 2025 by rpki-client