Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File: wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier: r3tw7510BHQHeY08MsTwVmBeIP50+pcaq8553dxabq0=
Subject key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02479F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 May 2025 23:58:21 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 59117
AS: 135074
IP: 103.172.110.0/23
IP: 103.204.13.0/24
IP: 203.168.128.0/22
IP: 2001:df7:6e80::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149407 (0x2479f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 23:58:21 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59117
135074
sbgp-ipAddrBlock: critical
IPv4:
103.172.110.0/23
103.204.13.0/24
203.168.128.0/22
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
4e:78:01:0e:b9:df:24:ec:f5:18:c7:56:b4:41:de:f8:b5:72:
6e:b1:37:2f:4a:f8:6c:b7:44:e3:bb:db:ac:ca:91:2e:34:b2:
e5:6f:be:92:37:85:ae:00:ee:8c:6d:3a:7f:d6:5c:74:74:b5:
f2:24:b6:a7:5a:f5:8b:aa:e4:31:bb:8a:28:7b:04:f4:d5:6d:
25:6a:bb:68:09:2d:45:87:54:0e:e1:1e:e4:53:4f:20:b8:c5:
68:b6:fa:ea:85:d5:4c:c5:05:ad:87:57:69:9a:d7:7f:97:f4:
34:b7:5f:f4:0b:56:d1:6e:68:97:c0:df:25:0b:c4:d6:f7:37:
a1:df:bf:0f:aa:6b:ae:05:2e:5f:f2:ff:77:00:72:1c:82:49:
9e:e6:22:f2:bc:66:76:4f:0a:3f:d1:9f:1b:ba:eb:96:91:16:
35:ec:a6:1e:6b:c3:d1:e4:ed:d0:05:b8:96:bc:b3:1b:57:7e:
8b:46:a2:d5:31:6e:ac:0e:e3:4d:79:15:28:ed:d9:dd:a6:81:
09:0f:e4:7f:ba:a5:10:c4:bf:46:9e:89:b8:ca:4d:6b:ed:d7:
bd:a7:d0:d6:9a:bd:d8:07:25:67:ef:d8:22:ee:e2:5f:a0:e8:
a2:5d:72:1f:bc:8d:b2:f6:d4:a3:22:33:20:9e:0e:5c:45:d3:
34:fa:3b:50
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIDAkefMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUyMDIzNTgyMVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYz
QTRDQUE2REE0MjQ5NjI5MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqRJo8yKwBeGuEo7hI4KAgyO1kTLDJZtWZu9BGbMxDHrsoSZ3Phq1/4i4fvFmT
nBzGk1yxOu+FDjGliZNfk6fC+y+0M3mk4/813NqP40oPO9L4qKO9OYSWMMxvLViv
iqxqQS4dkPEn9/73MY4N4/DCmSx2L7Wcu324iMZbEqX/7R6AGhDVjo5DhFAl0UYM
2OGC/OJFVeFIP/aPT/PFitEeg3Ls3Dqzcr3dLafD3m01mULW3taC8kkO8HGz37KP
N0E7Eex/qS5wmWZLAZ0BCfkdm8sL7TGPMw9Erj3HAW0ehROWFmNKiLelOe6ZR+xr
s1IzFjEj3uKkyagBzhMFMkqTAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQUwvKOnRiE
OcT+afY6TKptpCSWKR0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ1RDI1LzY3RjJCMEQ4MEJEMjExRUNCQUE0ODA2QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJp
RU9jVC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAObtAgMCD6IwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBAFnrG4D
BABnzA0DBALLqIAwDwQCAAIwCQMHASABDfdugDANBgkqhkiG9w0BAQsFAAOCAQEA
TngBDrnfJOz1GMdWtEHe+LVybrE3L0r4bLdE47vbrMqRLjSy5W++kjeFrgDujG06
f9ZcdHS18iS2p1r1i6rkMbuKKHsE9NVtJWq7aAktRYdUDuEe5FNPILjFaLb66oXV
TMUFrYdXaZrXf5f0NLdf9AtW0W5ol8DfJQvE1vc3od+/D6prrgUuX/L/dwByHIJJ
nuYi8rxmdk8KP9GfG7rrlpEWNeymHmvD0eTt0AW4lryzG1d+i0ai1TFurA7jTXkV
KO3Z3aaBCQ/kf7qlEMS/Rp6JuMpNa+3XvafQ1pq92AclZ+/YIu7iX6Dool1yH7yN
svbUoyIzIJ4OXEXTNPo7UA==
-----END CERTIFICATE-----
Generated at Fri May 30 08:30:54 2025 by rpki-client