Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer (raw, json)
Hash identifier: NJW+Q9ut22mfT6QlS3p0LvE9EX9GQijVHCyUaNUDUqA=
Subject key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6466
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 11:04:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 997
IP: 205.210.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 May 2025 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25702 (0x6466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 1 11:04:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:a7:f8:40:98:32:48:9b:00:44:7b:35:e6:
8c:ba:ad:39:f1:bd:e3:04:46:a1:fe:88:8a:05:ea:
e9:8d:9f:d3:68:bd:fa:66:ac:58:78:e1:23:ce:71:
24:eb:66:ae:31:8b:9b:be:e3:e0:c8:0e:a1:e3:7b:
3d:86:04:2a:10:7a:45:2e:4c:85:fd:c6:8a:12:30:
14:48:70:b2:05:0b:b0:0f:52:e6:60:b5:c9:ac:d0:
1b:d4:a6:66:57:75:89:df:9f:69:1a:00:e9:89:cd:
27:b2:38:d0:f4:74:fb:23:c8:7c:5c:8b:7a:2e:2f:
c4:b7:24:07:60:9f:e7:d0:c8:c1:8e:bd:b0:82:dc:
24:57:c4:aa:1d:73:33:90:e0:63:3b:1c:90:16:d8:
cb:3f:c2:76:5a:2a:87:49:37:29:89:e7:d6:33:9f:
27:63:0b:49:16:29:53:4f:cb:93:65:9c:84:01:cf:
86:fd:64:4d:7a:09:89:cd:3e:5c:36:00:01:d1:c0:
01:40:23:8d:f7:45:d2:3b:e6:eb:8f:6b:b9:35:57:
44:a8:14:db:7e:1f:17:01:a8:70:6f:e7:79:86:ae:
be:98:8e:a4:89:fc:92:44:5a:09:23:32:47:8e:63:
a2:19:ee:fb:6d:53:c3:0e:b2:9d:34:85:74:0d:bd:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
997
sbgp-ipAddrBlock: critical
IPv4:
205.210.164.0/22
Signature Algorithm: sha256WithRSAEncryption
97:9c:0a:22:eb:ec:1d:09:c7:a0:25:ef:92:60:0c:3f:26:3e:
96:0d:25:d6:df:32:ce:a6:98:34:f6:e2:de:ae:76:b1:d0:81:
9c:ed:21:47:ba:26:55:1b:04:bc:e8:63:3a:66:31:45:9c:1e:
7b:eb:74:2c:0b:ca:a2:cd:08:2c:b4:57:1d:87:a9:f2:67:83:
d4:01:da:38:01:e9:90:e1:cd:a1:d4:44:67:85:c9:c6:cd:76:
59:75:1f:aa:9c:8c:39:33:70:08:32:c7:e4:19:28:94:48:10:
02:da:0b:dd:47:58:88:7d:16:b9:e9:58:34:f2:17:ea:93:ce:
2f:1a:05:df:90:36:a3:b1:88:59:5e:fa:61:c8:db:bd:6a:51:
0a:0b:c3:43:3a:e6:d0:e5:7e:27:c4:a9:65:83:35:de:07:c5:
e7:18:18:21:fb:64:b5:91:7b:4e:34:7a:52:2e:87:cf:81:43:
d5:13:76:21:c3:2a:ee:8e:d3:51:a8:0e:07:8c:4a:20:98:27:
51:26:6f:8e:c3:f3:d2:31:66:db:30:65:a4:c1:89:a5:e9:39:
f2:d6:93:56:72:f0:2c:c2:6e:99:39:8a:10:c9:c2:d8:bf:03:
94:f5:ac:81:cb:33:24:8b:5b:fc:db:07:64:f5:cb:ad:0c:23:
f4:cd:71:b7
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgICZGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNTAxMTEwNDI3WhcNMjYwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyNjk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJE
NEI3OENDMDg0QkZDMkE2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALHHp/hAmDJImwBEezXmjLqtOfG94wRGof6IigXq6Y2f02i9+masWHjhI85xJOtm
rjGLm77j4MgOoeN7PYYEKhB6RS5Mhf3GihIwFEhwsgULsA9S5mC1yazQG9SmZld1
id+faRoA6YnNJ7I40PR0+yPIfFyLei4vxLckB2Cf59DIwY69sILcJFfEqh1zM5Dg
YzsckBbYyz/Cdloqh0k3KYnn1jOfJ2MLSRYpU0/Lk2WchAHPhv1kTXoJic0+XDYA
AdHAAUAjjfdF0jvm649ruTVXRKgU234fFwGocG/neYauvpiOpIn8kkRaCSMyR45j
ohnu+21Tww6ynTSFdA29AcECAwEAAaOCAw4wggMKMB0GA1UdDgQWBBRdt1st+U0E
R0puXi1LeMwIS/wqbDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvMDk1RjZDOEMyNjdDMTFGMDk2NzdGODBCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI2OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxO
QkVkS2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAZBggrBgEFBQcBCAEB/wQKMAig
BjAEAgID5TAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs3SpDANBgkqhkiG
9w0BAQsFAAOCAQEAl5wKIuvsHQnHoCXvkmAMPyY+lg0l1t8yzqaYNPbi3q52sdCB
nO0hR7omVRsEvOhjOmYxRZwee+t0LAvKos0ILLRXHYep8meD1AHaOAHpkOHNodRE
Z4XJxs12WXUfqpyMOTNwCDLH5BkolEgQAtoL3UdYiH0WuelYNPIX6pPOLxoF35A2
o7GIWV76YcjbvWpRCgvDQzrm0OV+J8SpZYM13gfF5xgYIftktZF7TjR6Ui6Hz4FD
1RN2IcMq7o7TUagOB4xKIJgnUSZvjsPz0jFm2zBlpMGJpek58taTVnLwLMJumTmK
EMnC2L8DlPWsgcszJItb/NsHZPXLrQwj9M1xtw==
-----END CERTIFICATE-----
Generated at Mon May 5 02:08:54 2025 by rpki-client