Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.cer (raw, json)
Hash identifier: AUC8tvcKQlWIEmkJc0z65mQNAxPnacLqwkeTMpdohGk=
Subject key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024507
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 May 2025 16:29:00 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9249
IP: 113.11.240.0/21
IP: 202.80.32.0/20
IP: 2400:3400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 May 2025 02:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148743 (0x24507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 8 16:29:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:b9:85:f3:47:c7:7d:f7:d6:0d:b4:79:9e:
8a:33:67:08:33:da:f1:0a:b7:d0:5f:6f:b7:33:38:
a0:a9:34:3a:bc:9d:44:5e:d1:a1:91:97:55:27:93:
49:36:c9:0d:01:45:49:25:ba:8a:77:d8:f0:d3:e2:
ed:00:f3:5a:fa:5d:7d:61:f8:2f:c0:52:43:f8:ee:
d9:37:48:b9:85:fb:a9:3b:6e:b2:8e:94:cb:43:d9:
d1:0c:f6:1d:bc:39:b9:6c:a4:05:3b:b0:a1:18:ff:
3a:ff:5a:0e:c6:23:c0:87:26:0b:6d:eb:f3:46:39:
62:44:57:07:66:24:fa:99:27:ed:3a:cc:e9:d2:0f:
ad:45:20:ac:95:e8:f8:aa:1b:c7:df:89:35:42:0e:
43:4e:50:14:ab:31:10:e9:f7:78:1a:c5:5d:68:8a:
45:6b:5f:88:09:9d:1f:8a:d4:c7:77:60:30:1d:22:
7b:3d:ff:b4:ca:0a:68:0a:a6:eb:4d:1b:6b:d1:41:
ed:81:f2:83:5f:ea:01:f0:d4:02:7b:6f:73:b2:3c:
13:2c:03:2b:5a:f1:75:8d:30:29:76:7a:fa:f9:d2:
9f:00:e8:bb:bc:b9:c2:e1:ee:14:d9:c5:64:70:5b:
de:38:cd:43:78:0f:80:91:15:26:44:8f:de:90:f5:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9249
sbgp-ipAddrBlock: critical
IPv4:
113.11.240.0/21
202.80.32.0/20
IPv6:
2400:3400::/32
Signature Algorithm: sha256WithRSAEncryption
6e:cf:9d:80:96:da:2b:93:7d:04:0d:d5:d1:95:0c:99:7e:bb:
85:5c:1c:92:a9:68:a4:00:eb:57:ee:c6:32:0b:87:85:3a:cb:
4f:28:9d:52:98:49:1a:b3:88:50:02:36:a4:ab:aa:69:f2:b4:
42:f3:5c:a1:66:e2:98:f3:04:1e:4d:c0:a4:59:5d:80:89:42:
5b:bf:db:2f:b6:e3:96:56:dc:03:41:74:d8:a0:4a:74:9c:6d:
8b:62:6a:6c:56:a2:51:32:cc:31:91:6c:4d:5f:e0:6f:b8:78:
0f:4e:05:c6:88:69:eb:4a:93:fd:86:12:d6:4f:4c:df:54:52:
07:2b:2a:6e:3a:29:8e:e7:01:90:07:0e:70:f3:0a:20:6b:bc:
0e:e7:98:41:a9:bd:d7:a7:26:7f:fd:8a:c2:2e:62:2c:89:02:
8d:a3:47:80:02:5f:07:4b:ce:29:bc:2a:02:2c:61:de:ef:36:
32:b3:d6:5a:6b:a5:43:d5:f6:39:47:17:bd:71:56:28:cf:41:
2c:dd:25:a2:19:27:11:17:bf:f3:3c:98:51:e2:dc:3f:16:4e:
8d:00:f1:e4:45:c4:55:cb:1f:8c:ff:ff:ed:0b:09:b2:db:05:
0d:20:ef:9f:12:83:06:22:8e:29:46:18:64:4a:43:9c:05:9d:
6e:08:76:cd
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAkUHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwODE2MjkwMFoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5
RkY4QjlBQUI3MTNGNkVEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYV7mF80fHfffWDbR5noozZwgz2vEKt9Bfb7czOKCpNDq8nURe0aGRl1Unk0k2
yQ0BRUkluop32PDT4u0A81r6XX1h+C/AUkP47tk3SLmF+6k7brKOlMtD2dEM9h28
OblspAU7sKEY/zr/Wg7GI8CHJgtt6/NGOWJEVwdmJPqZJ+06zOnSD61FIKyV6Piq
G8ffiTVCDkNOUBSrMRDp93gaxV1oikVrX4gJnR+K1Md3YDAdIns9/7TKCmgKputN
G2vRQe2B8oNf6gHw1AJ7b3OyPBMsAyta8XWNMCl2evr50p8A6Lu8ucLh7hTZxWRw
W944zUN4D4CRFSZEj96Q9R7xAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU5xqfIU6A
ybw7LSOf+LmqtxP27bcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4NTI1LzUyMjEyNjEwNjEyRjExRTdCRDJFREEwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2
QXlidzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJCEwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBANxC/ADBATKUCAw
DQQCAAIwBwMFACQANAAwDQYJKoZIhvcNAQELBQADggEBAG7PnYCW2iuTfQQN1dGV
DJl+u4VcHJKpaKQA61fuxjILh4U6y08onVKYSRqziFACNqSrqmnytELzXKFm4pjz
BB5NwKRZXYCJQlu/2y+245ZW3ANBdNigSnScbYtiamxWolEyzDGRbE1f4G+4eA9O
BcaIaetKk/2GEtZPTN9UUgcrKm46KY7nAZAHDnDzCiBrvA7nmEGpvdenJn/9isIu
YiyJAo2jR4ACXwdLzim8KgIsYd7vNjKz1lprpUPV9jlHF71xVijPQSzdJaIZJxEX
v/M8mFHi3D8WTo0A8eRFxFXLH4z//+0LCbLbBQ0g758SgwYijilGGGRKQ5wFnW4I
ds0=
-----END CERTIFICATE-----
Generated at Fri May 16 06:52:23 2025 by rpki-client