Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
File: qzsSgRukXmOSsAXTQfk6DQfyqxw.cer (raw, json)
Hash identifier: tdzN7IPnMo41b5Y/6pEbq+FZI3aSfFxUKs7YaL/wewc=
Subject key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C09
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 02:31:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 203.15.172.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142345 (0x22c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 29 02:31:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A918557B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:fe:5d:5a:b9:fe:b1:14:a1:f1:b7:18:3a:
d2:39:26:c0:e4:11:1e:71:06:bb:3e:76:21:97:1d:
e4:39:12:5a:11:d4:60:a4:9d:f6:22:94:74:7f:14:
33:59:9d:0d:e8:85:23:9e:5a:7e:32:bd:01:6a:38:
75:3f:62:42:6c:11:32:10:56:ec:01:d4:ed:77:d1:
43:8f:0c:83:db:e0:c7:dc:e0:84:2e:07:60:de:af:
b1:e7:90:20:dc:67:89:a2:92:88:3c:64:1a:15:5d:
32:70:63:26:f4:63:a9:bd:52:d3:69:3e:6f:60:a8:
ae:36:24:45:f4:d7:25:54:2a:fd:d6:15:2e:19:ff:
07:0e:35:cb:0a:16:b4:6f:75:1e:25:17:34:a3:a2:
2a:2c:3e:a5:6a:5d:d8:3c:2b:81:d3:3a:a9:9b:35:
58:00:53:64:e9:e0:b8:1b:97:d8:49:fb:e9:77:5f:
a0:46:d3:82:58:96:dd:37:8e:fb:d5:c5:f7:21:36:
25:19:33:fb:d8:b9:4a:4b:bf:e5:33:ff:2d:96:98:
14:cb:4b:fc:45:85:60:1a:b6:69:e3:e4:d0:e2:ce:
5c:e0:70:93:da:cd:0e:06:ee:c0:42:c4:34:2a:5a:
d5:38:a4:49:1f:1b:be:ba:c2:12:69:4f:a6:2b:0b:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.15.172.0/23
Signature Algorithm: sha256WithRSAEncryption
21:58:32:cd:c2:5a:15:ea:d8:89:70:eb:bc:d6:90:56:20:d9:
45:77:f7:b6:0a:24:af:b5:1d:62:94:94:93:c0:2d:ef:e3:c5:
dc:f6:27:0a:e2:a1:41:9d:86:bf:35:8e:82:8c:5a:12:7f:3c:
4d:df:9f:fd:ae:fe:6e:f1:42:06:7b:44:f7:54:b6:ad:93:d4:
ed:80:10:ce:ea:c1:be:61:19:02:25:f1:3e:b8:02:af:25:27:
8a:7b:5f:05:dd:94:99:2a:4f:6d:4b:4c:ab:51:24:2a:2c:af:
75:95:8f:78:b7:35:49:86:6d:2e:a6:9a:bc:2c:36:06:a7:09:
8f:bb:84:b5:1d:ba:a6:e1:bb:ee:5d:28:9d:6b:b2:e5:c9:b3:
c3:5b:13:78:59:ea:6f:b0:d5:5b:df:3b:db:6c:b6:22:9c:3f:
bf:f1:0e:74:a0:e1:0c:a8:bf:12:f4:8b:9c:a1:8d:7f:08:ff:
a5:ab:62:84:0e:93:67:96:da:e6:ed:bd:08:bc:0c:a2:df:6d:
c0:2e:8c:78:45:8b:72:fa:d4:80:c7:82:7f:2a:3b:c4:d7:30:
5c:5c:eb:91:19:54:78:c6:17:cd:21:67:49:98:df:73:34:43:
0c:13:17:15:7c:3a:a1:6d:24:0e:92:02:64:0b:c7:c2:49:b8:
2f:f8:a2:2c
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAiwJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEyOTAyMzEwNVoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODU1N0IxMTAvBgNVBAUTKEFCM0IxMjgxMUJBNDVFNjM5MkIwMDVE
MzQxRjkzQTBEMDdGMkFCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7zP5dWrn+sRSh8bcYOtI5JsDkER5xBrs+diGXHeQ5EloR1GCknfYilHR/FDNZ
nQ3ohSOeWn4yvQFqOHU/YkJsETIQVuwB1O130UOPDIPb4Mfc4IQuB2Der7HnkCDc
Z4mikog8ZBoVXTJwYyb0Y6m9UtNpPm9gqK42JEX01yVUKv3WFS4Z/wcONcsKFrRv
dR4lFzSjoiosPqVqXdg8K4HTOqmbNVgAU2Tp4Lgbl9hJ++l3X6BG04JYlt03jvvV
xfchNiUZM/vYuUpLv+Uz/y2WmBTLS/xFhWAatmnj5NDizlzgcJPazQ4G7sBCxDQq
WtU4pEkfG766whJpT6YrCwgLAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUqzsSgRuk
XmOSsAXTQfk6DQfyqxwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg1NTdCL0RCNEVENjA2Qzk0QTExRUQ5MzAxNkQzOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NTU3Qi9EQjRFRDYwNkM5NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1
a1htT1NzQVhUUWZrNkRRZnlxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAHLD6wwDQYJKoZIhvcNAQELBQADggEBACFYMs3CWhXq2Ilw67zW
kFYg2UV397YKJK+1HWKUlJPALe/jxdz2JwrioUGdhr81joKMWhJ/PE3fn/2u/m7x
QgZ7RPdUtq2T1O2AEM7qwb5hGQIl8T64Aq8lJ4p7XwXdlJkqT21LTKtRJCosr3WV
j3i3NUmGbS6mmrwsNganCY+7hLUduqbhu+5dKJ1rsuXJs8NbE3hZ6m+w1VvfO9ts
tiKcP7/xDnSg4QyovxL0i5yhjX8I/6WrYoQOk2eW2ubtvQi8DKLfbcAujHhFi3L6
1IDHgn8qO8TXMFxc65EZVHjGF80hZ0mY33M0QwwTFxV8OqFtJA6SAmQLx8JJuC/4
oiw=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:04 2025 by rpki-client