Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
File: vpuQTrdssFxgw-LDeeL6SJoOF3I.cer (raw, json)
Hash identifier: XCjT5SmqrL/J8fsNBdqunkLY5HLI3WhWtCktMH5KY7Q=
Subject key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0228BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 12 Jan 2025 07:52:25 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 132714
IP: 2001:df4:7140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141502 (0x228be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 12 07:52:25 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E5832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:8d:ee:d6:a1:67:cb:d8:1e:9b:35:a6:dc:
f2:a9:0f:08:31:a4:20:bf:4f:de:2a:58:6f:52:81:
c0:78:9b:4d:e2:93:2f:c5:f7:a0:a3:69:0a:a9:eb:
e0:88:d5:3d:4e:2e:6f:61:63:2f:f6:af:a7:3e:20:
6d:45:a9:f0:9f:72:84:ce:2e:6e:a3:b7:00:cd:ab:
ea:fd:e1:fe:24:28:f7:59:55:af:db:45:23:c9:8c:
d4:2c:5a:ad:0e:be:93:bb:29:2f:ed:ff:d4:be:29:
cd:f4:4c:0f:ab:d1:07:64:9e:25:02:97:77:a5:c7:
4b:99:6c:e7:ef:3a:22:f3:a9:de:6a:c9:1b:f8:2c:
96:76:ce:59:59:8d:dd:88:9a:9d:c7:62:c7:e2:e0:
e6:33:5f:df:79:cf:2c:6a:3a:ea:c6:c5:5d:35:5f:
9c:1d:e6:0b:ea:89:39:d0:60:68:e6:1b:ed:a9:cf:
06:12:6f:06:73:05:17:ed:c5:45:23:6c:dc:5a:0a:
5f:4d:bf:26:da:a8:2d:8e:88:51:01:47:96:97:7d:
f1:25:af:e0:39:b9:a1:4b:aa:fb:d0:77:1c:07:fd:
93:96:b5:a1:1b:54:61:db:b4:67:6d:3a:5d:64:61:
8b:f8:c2:dd:90:73:b9:35:8e:c3:ce:2f:17:00:67:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132714
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:7140::/48
Signature Algorithm: sha256WithRSAEncryption
ce:77:b4:2a:61:ee:4f:0b:2e:85:9c:25:f3:6b:71:04:07:f2:
2a:85:94:46:44:0a:41:9d:ba:a2:90:c5:a1:0b:e4:41:3b:f5:
30:b5:00:85:84:a8:9d:05:d3:b4:35:7a:88:61:4f:ff:2d:a1:
aa:17:6e:8b:2f:4c:e1:eb:53:a5:f7:a1:1f:8c:7c:ef:f8:fc:
d4:d5:df:1b:c4:dd:a9:83:45:70:c3:44:99:61:d3:63:2a:dc:
5d:e4:49:aa:00:07:3c:1b:f8:bf:1f:11:36:bd:d1:0d:56:28:
55:d3:8f:88:78:15:e2:6b:91:49:03:f5:2d:41:05:8a:39:9d:
54:aa:44:8a:e7:dc:82:c0:40:fb:7e:f5:97:95:5b:64:f9:20:
22:82:dd:76:2d:79:ef:2b:77:f5:03:9b:65:14:a8:a0:3b:a4:
f8:4c:cb:fa:75:5d:6a:f4:95:49:30:4a:23:aa:27:52:3a:22:
02:db:a1:16:79:b0:9e:fb:ed:55:05:a1:76:06:58:25:22:12:
6f:29:7f:7f:c6:2e:67:8f:91:fa:ef:2e:1d:11:b3:42:89:50:
81:3c:d5:c1:a3:b7:33:0c:8b:58:21:f9:a1:8e:3a:37:e9:41:
1e:d2:d1:e0:da:15:aa:e2:ff:22:54:37:d3:24:3a:5b:0a:53:
d5:3d:6f:6d
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAii+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDExMjA3NTIyNVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTU4MzIxMTAvBgNVBAUTKEJFOUI5MDRFQjc2Q0IwNUM2MEMzRTJD
Mzc5RTJGQTQ4OUEwRTE3NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDo2Y3u1qFny9gemzWm3PKpDwgxpCC/T94qWG9SgcB4m03iky/F96CjaQqp6+CI
1T1OLm9hYy/2r6c+IG1FqfCfcoTOLm6jtwDNq+r94f4kKPdZVa/bRSPJjNQsWq0O
vpO7KS/t/9S+Kc30TA+r0QdkniUCl3elx0uZbOfvOiLzqd5qyRv4LJZ2zllZjd2I
mp3HYsfi4OYzX995zyxqOurGxV01X5wd5gvqiTnQYGjmG+2pzwYSbwZzBRftxUUj
bNxaCl9NvybaqC2OiFEBR5aXffElr+A5uaFLqvvQdxwH/ZOWtaEbVGHbtGdtOl1k
YYv4wt2Qc7k1jsPOLxcAZ6J1AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUvpuQTrds
sFxgw+LDeeL6SJoOF3IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU1ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNTgzMi8yNkU1ODI1NEQwQkExMUVGODk2Q0QwMjZDNEY5QUUwMi92cHVRVHJk
c3NGeGd3LUxEZWVMNlNKb09GM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZqMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9HFAMA0G
CSqGSIb3DQEBCwUAA4IBAQDOd7QqYe5PCy6FnCXza3EEB/IqhZRGRApBnbqikMWh
C+RBO/UwtQCFhKidBdO0NXqIYU//LaGqF26LL0zh61Ol96EfjHzv+PzU1d8bxN2p
g0Vww0SZYdNjKtxd5EmqAAc8G/i/HxE2vdENVihV04+IeBXia5FJA/UtQQWKOZ1U
qkSK59yCwED7fvWXlVtk+SAigt12LXnvK3f1A5tlFKigO6T4TMv6dV1q9JVJMEoj
qidSOiIC26EWebCe++1VBaF2BlglIhJvKX9/xi5nj5H67y4dEbNCiVCBPNXBo7cz
DItYIfmhjjo36UEe0tHg2hWq4v8iVDfTJDpbClPVPW9t
-----END CERTIFICATE-----
Generated at Thu Feb 6 08:11:33 2025 by rpki-client