Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer (raw, json)
Hash identifier: vtYUOfc39kVe1Zn3eA+xvhPwTo7VvWFC0S/bNPoMmBg=
Subject key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024527
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 May 2025 23:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 132694
IP: 103.18.92.0/22
IP: 2406:7700::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 May 2025 21:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148775 (0x24527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 8 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:d1:eb:f0:6a:5c:77:0d:87:9d:36:bf:a3:
21:cb:24:f1:9a:fb:55:26:60:a1:6c:7e:95:f5:9d:
ae:57:4d:ff:36:df:7c:64:5f:65:d0:d7:3a:45:6f:
d9:3b:40:7d:2f:43:4c:d9:cd:37:6f:9d:fc:0e:1a:
f0:c0:df:2a:f7:ce:7c:57:13:ef:f0:c3:c9:c7:cb:
eb:5d:fa:0a:80:2d:7e:b4:f6:c8:22:c2:f7:1b:c3:
c4:1a:7b:b6:91:ad:9e:27:f0:45:08:51:f0:bd:4e:
d0:d0:12:8a:d8:9d:d8:e1:6a:60:3d:04:e0:cf:1b:
1e:df:b1:1f:49:fa:75:b6:46:c2:a7:ee:63:ad:99:
cd:ad:c8:47:fc:a2:4f:36:65:9c:69:fa:29:61:d4:
63:bd:bc:54:ce:a4:80:d2:82:51:f0:9f:dc:d5:7f:
f1:fa:0a:82:9a:29:72:a4:2c:2a:95:94:10:41:7f:
b4:4d:9b:06:22:19:89:92:7a:00:ff:f1:cd:08:b7:
85:25:21:63:b6:d7:e2:8c:cf:14:ff:ee:ee:65:6d:
aa:09:45:58:39:05:48:39:56:0c:06:ac:51:58:ba:
4e:93:91:58:b6:89:c6:cd:79:30:7b:72:5d:3d:04:
cd:e8:81:f4:60:c4:b8:1e:be:0c:29:36:cf:a7:b0:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132694
sbgp-ipAddrBlock: critical
IPv4:
103.18.92.0/22
IPv6:
2406:7700::/32
Signature Algorithm: sha256WithRSAEncryption
c7:3f:b3:ad:2a:d5:35:65:93:43:53:3b:48:92:c5:a2:2c:0e:
d4:7b:f5:d2:fa:68:de:b9:45:7f:c6:9b:ef:41:a4:db:f2:08:
30:80:14:2a:2d:80:5c:7c:e0:c0:dd:86:9e:cd:72:03:10:6d:
f1:53:0a:90:70:3d:70:87:40:96:fc:a0:cf:e7:24:50:65:f3:
68:8b:40:c6:98:2e:d4:c3:11:03:10:70:2c:62:ac:6c:35:db:
77:a1:6e:31:97:88:50:16:c2:ab:aa:92:a3:92:37:64:28:b7:
68:18:9b:eb:42:c7:87:64:59:6d:72:86:70:3d:33:78:4b:ce:
9f:fd:44:30:4e:e6:d3:0a:64:fd:96:7a:43:4b:16:c5:e1:36:
25:51:d1:71:91:95:97:77:4e:26:6d:76:75:90:e7:5b:c3:65:
59:1a:8a:56:66:62:fc:1e:63:c1:25:f6:3a:40:40:7b:6e:8d:
7b:c4:fe:40:ab:31:ef:43:e1:65:bd:2f:f9:9b:6c:50:a8:35:
58:96:44:13:db:7a:ec:47:84:bf:e6:37:9f:31:eb:ff:3b:87:
e5:a5:c5:bc:96:b2:56:84:1d:4f:14:6a:45:db:85:c1:fb:b9:
c0:68:2c:bd:0b:d3:7f:da:00:40:d1:be:db:44:da:49:4d:3f:
61:a4:b7:19
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAkUnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwODIzNDc0M1oXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5
NDJCNTYyQkQyNTYzQ0FFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1ONHr8Gpcdw2HnTa/oyHLJPGa+1UmYKFsfpX1na5XTf8233xkX2XQ1zpFb9k7
QH0vQ0zZzTdvnfwOGvDA3yr3znxXE+/ww8nHy+td+gqALX609sgiwvcbw8Qae7aR
rZ4n8EUIUfC9TtDQEorYndjhamA9BODPGx7fsR9J+nW2RsKn7mOtmc2tyEf8ok82
ZZxp+ilh1GO9vFTOpIDSglHwn9zVf/H6CoKaKXKkLCqVlBBBf7RNmwYiGYmSegD/
8c0It4UlIWO21+KMzxT/7u5lbaoJRVg5BUg5VgwGrFFYuk6TkVi2icbNeTB7cl09
BM3ogfRgxLgevgwpNs+nsM+PAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6suV/wV9
ZBQAyjCUK1Yr0lY8rrQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBNTIyLzg4NjkyQUJBNTM0MjExRUM4Q0QyRDcyMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dW
OVpCUUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgZWMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZxJcMA0EAgAC
MAcDBQAkBncAMA0GCSqGSIb3DQEBCwUAA4IBAQDHP7OtKtU1ZZNDUztIksWiLA7U
e/XS+mjeuUV/xpvvQaTb8ggwgBQqLYBcfODA3YaezXIDEG3xUwqQcD1wh0CW/KDP
5yRQZfNoi0DGmC7UwxEDEHAsYqxsNdt3oW4xl4hQFsKrqpKjkjdkKLdoGJvrQseH
ZFltcoZwPTN4S86f/UQwTubTCmT9lnpDSxbF4TYlUdFxkZWXd04mbXZ1kOdbw2VZ
GopWZmL8HmPBJfY6QEB7bo17xP5AqzHvQ+FlvS/5m2xQqDVYlkQT23rsR4S/5jef
Mev/O4flpcW8lrJWhB1PFGpF24XB+7nAaCy9C9N/2gBA0b7bRNpJTT9hpLcZ
-----END CERTIFICATE-----
Generated at Thu May 15 23:29:09 2025 by rpki-client