Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer (raw, json)
Hash identifier: 9rtLxOLsUzFWmadtdJoMrRV6R979cH0DWk1CLYuXItY=
Subject key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0229A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Jan 2025 09:18:13 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 153390
IP: 2401:d360::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141731 (0x229a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 16 09:18:13 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A913EF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:95:a8:53:a0:47:42:df:2a:b3:44:c4:d5:
04:73:2f:7d:99:00:ff:cb:19:7e:a9:98:f9:42:85:
0a:3f:b2:d8:ce:ca:60:87:d9:df:c0:00:83:7b:18:
d1:42:5f:fd:2a:ba:d9:cd:9a:a7:a5:f7:a5:39:7b:
23:98:f8:fd:26:62:28:39:c2:66:7a:4e:9e:2f:cd:
ed:25:bc:fb:3b:01:36:b5:db:d7:ea:19:6e:8f:fa:
8e:16:e0:f9:63:35:72:3d:23:71:ec:fd:a2:06:b2:
e1:69:b3:9b:46:84:fa:c7:6b:3e:ad:5e:40:69:e7:
3a:1d:fb:7d:e8:06:3f:c7:f6:8b:b3:83:98:a0:f9:
e0:24:47:63:58:48:84:8d:90:e8:11:d0:48:b9:3f:
e2:0f:6e:50:45:fb:a8:e5:ff:79:8a:20:cd:69:d0:
b0:be:a5:4c:f0:e8:07:31:c6:9e:cc:e5:e5:56:b3:
98:e3:7d:0f:71:b3:a5:9b:1b:e1:cd:64:ea:f6:72:
c5:8d:bb:fb:02:13:3c:0d:b2:1d:93:d0:0c:30:c2:
40:e7:88:74:85:29:7f:78:3b:8a:48:b6:a5:44:7a:
2e:18:68:83:fc:9a:de:7e:27:4f:80:90:12:2c:2a:
8d:34:45:31:7e:2b:2b:a6:d9:e8:17:30:9d:15:51:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153390
sbgp-ipAddrBlock: critical
IPv6:
2401:d360::/32
Signature Algorithm: sha256WithRSAEncryption
46:90:a9:8c:ad:58:5b:51:ef:00:ee:87:37:32:60:7d:b5:c7:
70:9b:1a:1e:da:80:d3:32:4b:89:06:fd:6a:69:f0:db:33:04:
20:8f:d6:f3:6b:9b:b2:2c:7c:e2:53:c4:69:e2:7d:3f:d3:c3:
7c:29:f9:e9:63:6c:1c:d7:89:7b:5c:e3:6e:7e:2b:cb:5e:15:
f6:4d:e4:07:53:02:9f:26:7c:7a:ef:24:12:89:6e:d2:65:57:
9b:a9:b1:2e:66:f1:71:b2:f4:5d:a7:bd:a5:d7:47:0f:5c:07:
1c:b2:72:12:55:ab:33:c1:b2:9a:f4:95:e4:92:ad:d7:61:47:
b5:2e:16:47:40:05:18:24:97:32:1f:52:3b:9e:93:fb:cd:09:
88:66:5c:2a:5c:52:0f:bd:1e:d8:2b:67:7a:51:ec:1b:42:3f:
1a:6d:6e:43:83:3e:b6:b3:29:e0:f4:b8:77:50:c1:78:88:75:
5e:46:db:1c:73:d8:38:cf:a1:e5:1a:75:01:93:6c:1e:9d:96:
a5:e3:a2:74:e4:08:30:85:a5:fe:b0:5d:9f:85:63:d1:4d:cb:
28:42:c6:97:02:30:3f:47:c6:36:c1:ea:bf:a7:37:fc:80:4c:
0e:a8:c0:4b:5b:c7:97:af:d3:0c:14:a6:54:b4:fa:30:03:58:
bc:7d:96:e5
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAimjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDExNjA5MTgxM1oXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5
ODE3RDQxQkY2Mjg5NzY1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkVZWoU6BHQt8qs0TE1QRzL32ZAP/LGX6pmPlChQo/stjOymCH2d/AAIN7GNFC
X/0qutnNmqel96U5eyOY+P0mYig5wmZ6Tp4vze0lvPs7ATa129fqGW6P+o4W4Plj
NXI9I3Hs/aIGsuFps5tGhPrHaz6tXkBp5zod+33oBj/H9ouzg5ig+eAkR2NYSISN
kOgR0Ei5P+IPblBF+6jl/3mKIM1p0LC+pUzw6Acxxp7M5eVWs5jjfQ9xs6WbG+HN
ZOr2csWNu/sCEzwNsh2T0AwwwkDniHSFKX94O4pItqVEei4YaIP8mt5+J0+AkBIs
Ko00RTF+Kyum2egXMJ0VUQpzAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUxEOdwB4g
0WzFoO+YF9Qb9iiXZSQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFRjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0
ZzBXekZvTy1ZRjlRYjlpaVhaU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlcuMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHTYDANBgkq
hkiG9w0BAQsFAAOCAQEARpCpjK1YW1HvAO6HNzJgfbXHcJsaHtqA0zJLiQb9amnw
2zMEII/W82ubsix84lPEaeJ9P9PDfCn56WNsHNeJe1zjbn4ry14V9k3kB1MCnyZ8
eu8kEolu0mVXm6mxLmbxcbL0Xae9pddHD1wHHLJyElWrM8GymvSV5JKt12FHtS4W
R0AFGCSXMh9SO56T+80JiGZcKlxSD70e2CtnelHsG0I/Gm1uQ4M+trMp4PS4d1DB
eIh1XkbbHHPYOM+h5Rp1AZNsHp2WpeOidOQIMIWl/rBdn4Vj0U3LKELGlwIwP0fG
NsHqv6c3/IBMDqjAS1vHl6/TDBSmVLT6MANYvH2W5Q==
-----END CERTIFICATE-----
Generated at Thu Feb 6 06:51:55 2025 by rpki-client