Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer (raw, json)
Hash identifier: dmhgGHth2V0qmMdbp8qys8efCGGF/hYq8J3ygPqpB8c=
Subject key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0241E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Apr 2025 22:52:29 +0000
Certificate not after: Thu 28 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 137480
IP: 2402:8440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147936 (0x241e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 22:52:29 2025 GMT
Not After : Aug 28 00:00:00 2025 GMT
Subject: CN=A91C5413, serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:fb:10:0c:ab:a0:81:dc:38:a5:a7:03:36:
b4:ac:35:e5:b2:d2:92:84:a1:d1:de:48:56:24:b1:
ec:0b:75:1f:f0:69:d1:88:7f:80:d1:06:27:da:b3:
5a:50:a5:06:b3:a1:4d:4e:33:40:12:ee:78:27:8c:
ca:c9:49:5f:62:cf:12:0f:3f:19:ad:22:24:52:ca:
07:cb:9f:66:fd:8c:ea:85:62:2c:e7:f1:48:1a:27:
d3:24:4b:43:5b:c7:07:a4:59:94:d6:12:16:99:dd:
bb:74:ed:29:9f:b9:4d:e1:3f:75:82:32:93:ea:fb:
7f:e4:a1:3c:90:fe:f1:bc:b1:64:85:f3:ef:07:0b:
f1:8e:cf:1c:58:b8:95:96:12:db:8e:55:19:83:c8:
d6:5b:94:55:b9:2b:a9:b9:82:70:39:60:c6:76:6f:
8b:e3:8e:84:5c:af:4c:6e:3e:de:1c:73:63:d3:0a:
58:ab:cd:94:c6:55:08:55:3c:1e:f0:8e:8c:a5:6e:
76:53:41:41:fa:96:9b:f4:e9:67:5d:df:5b:c9:b2:
05:ca:14:5d:f7:a9:d8:b9:48:d2:b8:c3:09:47:4b:
2e:58:ef:0a:0e:3e:ea:26:6d:bd:1a:23:4d:0f:bf:
b0:ba:3e:9f:f9:b6:01:cd:13:3b:f5:bd:85:99:23:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137480
sbgp-ipAddrBlock: critical
IPv6:
2402:8440::/32
Signature Algorithm: sha256WithRSAEncryption
08:f3:99:e7:16:75:87:90:03:03:a2:88:13:4d:d4:1b:ac:5c:
63:8b:20:7e:c3:69:24:6b:b3:45:8b:5d:7a:dd:a1:0b:00:28:
0b:2d:25:cd:06:ef:5f:e6:72:b8:45:5a:a7:b8:28:81:bc:95:
75:b5:a6:43:ef:f6:98:5f:fd:94:67:83:dc:8f:1a:d9:10:56:
ee:78:5c:cb:fc:b5:e6:4c:dd:a1:0d:e8:a2:3e:9d:99:45:27:
ee:98:26:57:90:1f:e2:f2:a0:ff:8b:1d:e8:56:9c:33:42:d3:
37:5e:9a:b0:fd:dd:55:54:4a:b2:63:fc:b7:78:94:f5:17:15:
03:be:d4:bc:75:cc:d6:73:38:39:d3:e8:57:f5:57:7c:a9:60:
70:63:99:2a:bc:01:6f:06:fe:a4:e3:fb:f1:66:aa:32:a1:ac:
07:51:07:66:10:84:9b:ee:ae:04:b1:1a:2a:5f:bd:cd:ee:04:
ea:f9:19:5f:05:df:f9:fd:d3:c1:df:92:a1:d3:1d:4f:19:72:
41:63:a7:68:6d:ee:65:88:20:a8:0f:5a:1a:a2:5b:ff:9a:0a:
b3:2e:98:c6:21:bc:0d:dd:b3:43:83:32:e0:4e:e9:1f:fd:f3:
27:01:32:28:51:d2:fe:d1:e7:04:11:58:a4:ae:99:b8:56:36:
5d:e8:82:56
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAkHgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQyODIyNTIyOVoXDTI1MDgyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzU0MTMxMTAvBgNVBAUTKDVGOTk5OUNEQTY0QTJBMUE2NjJFNTRF
NjFBMUQ1Nzk4QzY4OENDQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaC/sQDKuggdw4pacDNrSsNeWy0pKEodHeSFYksewLdR/wadGIf4DRBifas1pQ
pQazoU1OM0AS7ngnjMrJSV9izxIPPxmtIiRSygfLn2b9jOqFYizn8UgaJ9MkS0Nb
xwekWZTWEhaZ3bt07SmfuU3hP3WCMpPq+3/koTyQ/vG8sWSF8+8HC/GOzxxYuJWW
EtuOVRmDyNZblFW5K6m5gnA5YMZ2b4vjjoRcr0xuPt4cc2PTClirzZTGVQhVPB7w
joylbnZTQUH6lpv06Wdd31vJsgXKFF33qdi5SNK4wwlHSy5Y7woOPuombb0aI00P
v7C6Pp/5tgHNEzv1vYWZIxd9AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUX5mZzaZK
KhpmLlTmGh1XmMaIzMMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM1NDEzL0RGOTlBMUU4N0JFODExRUI5QTA5MjM0MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9YNW1aemFa
S0tocG1MbFRtR2gxWG1NYUl6TU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhkIMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAKEQDANBgkq
hkiG9w0BAQsFAAOCAQEACPOZ5xZ1h5ADA6KIE03UG6xcY4sgfsNpJGuzRYtdet2h
CwAoCy0lzQbvX+ZyuEVap7gogbyVdbWmQ+/2mF/9lGeD3I8a2RBW7nhcy/y15kzd
oQ3ooj6dmUUn7pgmV5Af4vKg/4sd6FacM0LTN16asP3dVVRKsmP8t3iU9RcVA77U
vHXM1nM4OdPoV/VXfKlgcGOZKrwBbwb+pOP78WaqMqGsB1EHZhCEm+6uBLEaKl+9
ze4E6vkZXwXf+f3Twd+SodMdTxlyQWOnaG3uZYggqA9aGqJb/5oKsy6YxiG8Dd2z
Q4My4E7pH/3zJwEyKFHS/tHnBBFYpK6ZuFY2XeiCVg==
-----END CERTIFICATE-----
Generated at Sun May 4 20:50:40 2025 by rpki-client