Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer
File: p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer (raw, json)
Hash identifier: vxo57WMVS3RHW843IdVQC7v9sZVl5ADWksn+bjU2Sug=
Subject key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0213E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Oct 2024 14:27:47 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 2404:f140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136160 (0x213e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 14 14:27:47 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A915FDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:76:73:d5:48:1c:15:7b:71:55:55:a9:f0:
92:58:74:5a:1b:a9:5d:fe:6a:1a:2e:a4:f6:24:f3:
26:c5:8a:05:84:c5:4a:08:9d:a7:ab:df:11:33:a5:
32:d7:7b:87:03:ec:68:f9:bc:91:58:1a:d8:74:46:
c0:d9:50:ae:a4:89:0e:0d:74:e0:b1:fa:e3:e4:4d:
6c:72:53:8a:63:3f:e0:de:25:5f:e5:d1:a0:80:13:
5e:c1:d5:8f:6f:9f:04:10:b6:72:5d:66:40:80:ac:
4f:84:16:1f:09:76:23:2c:89:33:a8:eb:22:1c:a8:
fe:15:8a:8d:3e:67:20:8e:0b:1c:a2:60:e6:bd:fc:
88:7e:10:6c:ef:b0:d7:3d:eb:30:71:fc:17:9b:42:
b1:cd:6e:a8:93:a1:94:4b:2f:81:3a:ed:a3:e5:f3:
e9:b2:74:3b:56:e8:1f:bb:ba:fb:df:15:7d:dc:ff:
51:1d:d8:08:02:14:36:8c:04:c5:3e:b7:20:23:0d:
27:92:28:60:74:44:27:09:c0:fa:7b:e3:1f:93:98:
ee:a0:47:8a:18:83:45:a4:a9:54:c4:11:47:c0:8a:
e7:a6:cf:ad:ea:3c:c7:b0:9d:ea:9c:03:80:2b:bb:
c7:91:c4:b4:b2:ae:35:10:19:98:5a:6b:5a:b8:f7:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f140::/32
Signature Algorithm: sha256WithRSAEncryption
b2:d0:4d:dd:a4:eb:59:89:50:15:11:80:79:07:77:49:ec:32:
85:d8:8c:2e:23:0e:f5:10:00:10:b3:50:55:d7:fe:fd:0e:44:
6e:fb:6c:6c:b0:e4:db:e5:c6:e5:66:35:f7:d4:90:62:34:7a:
0a:32:fa:6f:fd:9a:1a:fd:8c:2d:aa:6f:f2:03:1a:d2:db:6f:
3b:88:6e:8e:03:8f:66:4a:c8:07:94:6b:e9:a8:d9:8a:48:8a:
b2:a7:e7:9b:75:22:38:7f:db:a8:51:36:fc:8f:2d:09:d9:3a:
c4:87:ec:a1:eb:09:7c:98:53:b9:8c:72:71:79:ef:b0:0e:1d:
e4:ed:0a:1b:e2:4d:5e:b0:6a:2d:6f:ea:76:c3:f7:e2:70:c9:
08:e9:22:42:83:e0:71:28:de:b9:91:ff:79:39:1e:dc:e9:53:
70:b0:95:af:00:7b:e5:90:77:07:20:1b:69:18:1e:d4:92:25:
e8:70:a9:da:c2:e9:21:7c:f2:3e:d6:b5:27:e0:a8:58:40:f8:
59:57:5c:c9:80:ca:71:9b:7b:0f:d4:c8:9e:00:62:e1:c3:31:
6d:bc:fc:0a:0c:46:ea:a9:ca:d9:21:2b:17:94:41:f5:1c:84:
31:60:1a:46:5f:17:93:6d:13:94:8c:3e:88:f5:23:1d:84:08:
4c:e1:87:9d
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAhPgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAxNDE0Mjc0N1oXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1
REZDM0U5RjA2MzNCNzEyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4mHZz1UgcFXtxVVWp8JJYdFobqV3+ahoupPYk8ybFigWExUoInaer3xEzpTLX
e4cD7Gj5vJFYGth0RsDZUK6kiQ4NdOCx+uPkTWxyU4pjP+DeJV/l0aCAE17B1Y9v
nwQQtnJdZkCArE+EFh8JdiMsiTOo6yIcqP4Vio0+ZyCOCxyiYOa9/Ih+EGzvsNc9
6zBx/BebQrHNbqiToZRLL4E67aPl8+mydDtW6B+7uvvfFX3c/1Ed2AgCFDaMBMU+
tyAjDSeSKGB0RCcJwPp74x+TmO6gR4oYg0WkqVTEEUfAiuemz63qPMewneqcA4Ar
u8eRxLSyrjUQGZhaa1q490QbAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUp4kC9PDY
JLQPSW1d/D6fBjO3EpkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGRENGL0Y0RkRGNUVFOEQ0MTExRTk4MTUxNkEzMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBE
WUpMUVBTVzFkX0Q2ZkJqTzNFcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkBPFAMA0GCSqGSIb3DQEBCwUAA4IBAQCy0E3dpOtZiVAVEYB5
B3dJ7DKF2IwuIw71EAAQs1BV1/79DkRu+2xssOTb5cblZjX31JBiNHoKMvpv/Zoa
/Ywtqm/yAxrS2287iG6OA49mSsgHlGvpqNmKSIqyp+ebdSI4f9uoUTb8jy0J2TrE
h+yh6wl8mFO5jHJxee+wDh3k7Qob4k1esGotb+p2w/ficMkI6SJCg+BxKN65kf95
OR7c6VNwsJWvAHvlkHcHIBtpGB7UkiXocKnawukhfPI+1rUn4KhYQPhZV1zJgMpx
m3sP1MieAGLhwzFtvPwKDEbqqcrZISsXlEH1HIQxYBpGXxeTbROUjD6I9SMdhAhM
4Yed
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:08 2025 by rpki-client