Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.cer (raw, json)
Hash identifier: 0oA5cuQ0CM4jfSKyXmyBeJleCEB9s8YpizGb/EXC4jY=
Subject key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0243D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 May 2025 22:32:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 45148
IP: 119.252.192.0/19
IP: 2403:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148439 (0x243d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 3 22:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:a8:5e:7f:97:3d:a6:ea:5e:72:c4:52:b3:
9c:ad:d0:99:1a:4c:24:77:96:c4:68:bb:2c:52:0c:
0c:b7:1a:77:2c:d4:7d:9e:06:c3:f5:a9:0a:b3:d1:
13:29:28:9f:de:36:9a:bd:0f:f1:70:37:d7:5f:2a:
76:08:ce:fc:67:2d:c6:2e:3d:93:94:0e:90:3f:77:
27:38:c1:d4:2b:58:6d:69:b3:2b:ba:21:eb:59:99:
d2:fa:41:ee:3d:95:70:7f:da:40:d1:5f:f1:37:c3:
bf:21:ee:29:e2:03:86:01:58:68:9a:e2:c6:3f:73:
a9:89:3c:94:4b:91:b7:2f:7d:41:b4:30:fb:56:16:
ba:f9:26:75:17:e1:90:bd:48:f7:54:ce:3c:52:e4:
83:0e:c0:4f:d4:87:35:b1:f5:52:29:9d:59:d0:0f:
3c:83:77:d4:c8:56:74:bf:93:df:a9:47:42:55:32:
a6:37:ab:8d:fd:83:9b:98:08:b2:ce:ce:63:97:1c:
79:29:3c:dc:dd:61:fd:57:85:fd:16:36:db:cb:20:
23:fd:bd:98:63:7e:4d:35:d5:a4:fa:1d:3a:41:bc:
c3:d5:cb:5d:91:67:ce:56:60:0f:b8:f4:b9:30:24:
84:3b:98:08:4b:e8:aa:c7:bf:ae:71:a5:f9:70:ee:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45148
sbgp-ipAddrBlock: critical
IPv4:
119.252.192.0/19
IPv6:
2403:2200::/32
Signature Algorithm: sha256WithRSAEncryption
9d:17:de:23:38:fd:3c:48:43:56:f2:df:30:65:70:b6:90:81:
e8:b8:d4:22:dc:d2:dd:50:57:14:43:d5:1b:4c:ba:93:40:64:
cf:e8:aa:fa:46:17:88:ba:94:60:f8:d0:b4:5e:39:8b:3d:9b:
82:7c:7c:97:37:aa:74:2f:97:cc:1d:59:29:25:fc:14:f6:67:
77:40:c3:8a:57:3e:74:a3:ae:9e:08:16:59:bc:27:d8:ac:4a:
a1:97:b1:9d:70:0b:90:24:ec:4c:f1:9d:7a:36:79:08:36:ec:
7a:9e:d3:a1:b5:fc:1d:fe:34:0e:0f:30:c0:90:e0:4e:e3:f6:
66:ed:00:d0:8d:d8:58:9e:4b:93:83:fd:9c:ba:f8:f3:19:82:
c8:21:b9:ee:b7:de:8f:9a:21:b3:53:65:6d:02:b4:c5:ed:29:
2b:3e:c1:86:0c:79:8c:6f:9f:19:06:49:88:0d:80:57:96:1f:
71:47:40:7e:8c:e2:ac:19:68:c1:bf:39:6d:69:f6:7b:38:29:
93:34:1e:2e:57:af:b0:0a:9b:73:20:89:d2:ec:82:be:a9:23:
b0:c2:ff:7b:82:ad:63:1e:4a:09:e3:9f:f0:63:68:11:9a:42:
ea:3e:aa:3f:b1:c3:8b:74:06:4a:f7:cd:48:2a:c4:73:8c:d0:
75:57:bf:ed
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAkPXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwMzIyMzI1MFoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNB
QkM0NDNDOENDQkMwMzJFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+eahef5c9pupecsRSs5yt0JkaTCR3lsRouyxSDAy3Gncs1H2eBsP1qQqz0RMp
KJ/eNpq9D/FwN9dfKnYIzvxnLcYuPZOUDpA/dyc4wdQrWG1psyu6IetZmdL6Qe49
lXB/2kDRX/E3w78h7iniA4YBWGia4sY/c6mJPJRLkbcvfUG0MPtWFrr5JnUX4ZC9
SPdUzjxS5IMOwE/UhzWx9VIpnVnQDzyDd9TIVnS/k9+pR0JVMqY3q439g5uYCLLO
zmOXHHkpPNzdYf1Xhf0WNtvLICP9vZhjfk011aT6HTpBvMPVy12RZ85WYA+49Lkw
JIQ7mAhL6KrHv65xpflw7h87AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUKUHHFh7U
ouCbuRyrxEPIzLwDLtgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZFRUE5L0NFRDBBOUU2MUQ5NzExRTJCRjNFODE4MTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGRUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3
VW91Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALBcMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFd/zAMA0EAgAC
MAcDBQAkAyIAMA0GCSqGSIb3DQEBCwUAA4IBAQCdF94jOP08SENW8t8wZXC2kIHo
uNQi3NLdUFcUQ9UbTLqTQGTP6Kr6RheIupRg+NC0XjmLPZuCfHyXN6p0L5fMHVkp
JfwU9md3QMOKVz50o66eCBZZvCfYrEqhl7GdcAuQJOxM8Z16NnkINux6ntOhtfwd
/jQODzDAkOBO4/Zm7QDQjdhYnkuTg/2cuvjzGYLIIbnut96PmiGzU2VtArTF7Skr
PsGGDHmMb58ZBkmIDYBXlh9xR0B+jOKsGWjBvzltafZ7OCmTNB4uV6+wCptzIInS
7IK+qSOwwv97gq1jHkoJ45/wY2gRmkLqPqo/scOLdAZK981IKsRzjNB1V7/t
-----END CERTIFICATE-----
Generated at Sun May 11 09:35:11 2025 by rpki-client