Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
File: ZtnYF_hsgts986HE2XDyqoXKrX4.cer (raw, json)
Hash identifier: 0bbTJh/JGv6QX6TxXkMVH91pOtlKCI7Ql98LVXpBvUo=
Subject key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024485
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 May 2025 21:59:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2401:be20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 21:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148613 (0x24485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 21:59:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:4a:47:26:e9:2f:51:cc:ca:58:c3:13:e1:
89:90:a6:9a:be:6f:9d:fc:c8:e1:82:33:60:6f:75:
75:84:0f:b2:cb:1d:ed:13:7c:cf:c9:b7:d4:00:38:
a0:d3:ca:63:a2:0c:c6:f2:ad:0c:3e:36:a4:2c:a9:
68:cb:78:4d:50:59:41:ca:ae:7e:e3:3c:05:8f:4e:
34:6d:73:b8:1b:fa:70:f8:10:dc:40:65:29:e4:93:
b1:cc:85:09:30:87:49:1b:c7:42:ee:a4:6b:89:1a:
30:18:21:c3:29:37:46:8e:b3:06:41:8f:83:80:c9:
38:8a:1b:73:66:41:7b:07:c6:43:29:fb:ad:c0:65:
7d:71:8b:cf:57:b9:d9:40:af:6c:4a:03:fa:5e:76:
7b:24:e7:f0:b8:df:46:9f:c7:3e:0f:b0:d6:f3:c3:
8b:51:4e:95:26:f5:ea:74:eb:3c:e6:0f:71:74:48:
f0:d9:70:2c:f0:04:fe:36:13:ea:84:ff:ff:ea:74:
65:ae:bf:2a:f7:f7:89:27:12:04:da:31:70:5c:fd:
04:c9:41:59:0f:d1:cc:44:04:61:0b:a6:e7:ce:84:
62:45:4c:5b:e0:6e:d9:ce:9d:3a:3d:74:12:7a:8d:
be:11:c1:2c:9e:67:7e:61:9d:b2:00:1b:dd:89:8e:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:be20::/32
Signature Algorithm: sha256WithRSAEncryption
be:91:f6:1d:88:27:cb:ee:1c:58:ca:a0:69:69:7f:87:65:66:
ac:8c:66:9b:d1:87:5a:df:cf:1b:e1:98:33:52:75:12:05:93:
de:9a:06:64:f8:3a:4e:b5:57:a0:75:f7:58:b1:34:18:be:f4:
ae:33:78:64:47:99:ef:f9:77:2e:81:f4:5f:70:4e:d5:77:41:
74:12:ca:21:44:0a:df:27:ec:10:ed:37:78:e6:8c:c2:b7:6e:
93:7e:b5:09:cd:70:70:d8:51:0c:d6:96:18:bb:91:8f:91:6a:
fb:c8:e4:0c:7c:97:4b:7c:a2:22:c8:c6:8b:91:fb:52:0f:58:
84:5b:a5:6f:78:db:6e:b9:17:e4:89:8f:d0:8a:e0:df:f1:87:
f9:e6:b8:ef:38:7b:13:12:18:e8:08:60:9b:89:1c:14:47:12:
1b:8a:4c:7d:20:8e:0f:68:ff:e8:41:39:6d:8e:bb:43:c8:a1:
df:67:b8:66:66:aa:ea:a4:9a:0d:3d:a6:34:bf:dd:28:39:24:
0c:a7:fb:02:f5:b8:17:03:94:72:da:84:b9:0a:b9:5f:2a:4b:
3d:e6:82:37:cc:d7:52:87:79:ba:04:8f:a1:c3:8b:05:35:b9:
9b:35:2b:c9:53:f8:d6:a8:c1:84:cb:8a:b4:86:ef:d0:08:34:
86:bb:c8:77
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAkSFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwNjIxNTkxM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFD
NEQ5NzBGMkFBODVDQUFEN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCa0pHJukvUczKWMMT4YmQppq+b538yOGCM2BvdXWED7LLHe0TfM/Jt9QAOKDT
ymOiDMbyrQw+NqQsqWjLeE1QWUHKrn7jPAWPTjRtc7gb+nD4ENxAZSnkk7HMhQkw
h0kbx0LupGuJGjAYIcMpN0aOswZBj4OAyTiKG3NmQXsHxkMp+63AZX1xi89XudlA
r2xKA/pednsk5/C430afxz4PsNbzw4tRTpUm9ep06zzmD3F0SPDZcCzwBP42E+qE
///qdGWuvyr394knEgTaMXBc/QTJQVkP0cxEBGELpufOhGJFTFvgbtnOnTo9dBJ6
jb4RwSyeZ35hnbIAG92JjrqlAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUZtnYF/hs
gts986HE2XDyqoXKrX4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCNDM1L0Y1RTYyNzI0NUVDRTExRUY4ODU0Q0E1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9o
c2d0czk4NkhFMlhEeXFvWEtyWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAb4gMA0GCSqGSIb3DQEBCwUAA4IBAQC+kfYdiCfL7hxYyqBp
aX+HZWasjGab0Yda388b4ZgzUnUSBZPemgZk+DpOtVegdfdYsTQYvvSuM3hkR5nv
+XcugfRfcE7Vd0F0EsohRArfJ+wQ7Td45ozCt26TfrUJzXBw2FEM1pYYu5GPkWr7
yOQMfJdLfKIiyMaLkftSD1iEW6VveNtuuRfkiY/QiuDf8Yf55rjvOHsTEhjoCGCb
iRwURxIbikx9II4PaP/oQTltjrtDyKHfZ7hmZqrqpJoNPaY0v90oOSQMp/sC9bgX
A5Ry2oS5CrlfKks95oI3zNdSh3m6BI+hw4sFNbmbNSvJU/jWqMGEy4q0hu/QCDSG
u8h3
-----END CERTIFICATE-----
Generated at Thu May 15 00:15:36 2025 by rpki-client