Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
File: ez9g2bGigAKgeHXKtYohRXBz4X8.cer (raw, json)
Hash identifier: wc3o0ZL6+C0GKO15aTTSzUcJ09148xm48Njvnc7E590=
Subject key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024548
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 May 2025 14:17:16 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9989
IP: 27.111.208.0 -- 27.111.239.255
IP: 101.97.64.0/18
IP: 118.103.180.0/22
IP: 202.79.192.0/19
IP: 2403:b100::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 21:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148808 (0x24548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 14:17:16 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:57:aa:b7:3e:c3:29:5b:a9:93:1e:a2:27:
73:8b:ec:3e:ee:fd:ad:7f:13:9e:51:88:26:b2:9b:
e3:74:f2:50:4d:5c:40:ab:10:ba:9c:5c:e1:ba:84:
62:60:ad:2c:2b:8d:bd:1d:eb:18:4d:22:de:ca:d8:
d8:e9:0d:f1:e7:b7:c9:05:3c:ac:a4:14:3c:52:fa:
ee:72:fc:a2:68:e0:31:f9:5b:9a:ff:16:da:e2:a4:
7d:d3:24:e3:d1:f4:b0:62:8c:2b:01:15:e2:a0:3f:
e8:bf:cf:8c:ef:20:2f:09:2b:02:51:c2:9f:7e:31:
53:40:fa:80:fd:4e:c7:ff:6f:77:a4:43:9b:c0:2e:
72:d0:3d:2f:e2:0e:d2:f7:6b:b5:23:d5:af:cc:9c:
40:44:f6:54:0a:2a:d5:67:fa:ac:3b:3b:f2:7c:ce:
56:10:49:09:e5:42:c9:78:27:69:6b:68:22:2b:cc:
53:77:2b:5c:b6:71:b6:7a:26:0e:3d:98:4e:2b:4c:
67:ef:c2:1a:b7:62:d4:7e:c8:8e:51:c4:38:c7:71:
cb:ee:61:97:39:2e:16:5e:11:c9:33:c8:81:7f:2a:
b3:f7:fb:c7:65:4f:8a:98:81:cf:91:b5:d8:36:8c:
77:2c:1a:7d:49:94:b5:2a:ae:a9:8f:a0:43:ad:8f:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9989
sbgp-ipAddrBlock: critical
IPv4:
27.111.208.0-27.111.239.255
101.97.64.0/18
118.103.180.0/22
202.79.192.0/19
IPv6:
2403:b100::/31
Signature Algorithm: sha256WithRSAEncryption
32:19:39:83:34:7f:53:cb:34:ae:4f:ae:99:43:bc:3c:c6:27:
20:a0:c6:5e:2c:00:1f:c8:0c:03:0b:45:fe:a3:a8:d6:09:61:
53:f6:be:69:b6:9d:87:e5:e8:e7:c6:52:19:79:a6:ff:5f:e0:
e4:20:32:1a:9f:47:b6:3f:ba:01:17:f5:96:fa:f4:97:d3:b7:
cc:41:6e:1d:a4:4c:88:aa:44:60:6c:e0:70:7b:aa:0e:21:f8:
18:44:9b:96:d5:26:14:0e:b1:fe:9b:7b:32:09:fa:d4:ea:0d:
9b:29:6a:a5:98:c4:62:aa:73:b8:07:7c:d4:bf:5d:1c:94:e5:
54:75:af:67:96:63:c4:7f:c2:34:53:1d:3f:04:3e:f1:9c:42:
da:b9:10:bd:28:35:c4:8b:d0:6b:fd:3d:d5:ee:81:8a:6c:5f:
0d:6c:fc:cf:1f:1d:e1:fb:88:80:74:54:d8:e8:d0:c5:3f:67:
a6:0c:0a:3f:18:fb:7b:7e:40:f5:10:11:51:c9:6d:87:07:51:
7e:6d:e2:c5:26:b9:9c:3d:f1:60:16:89:3d:5e:01:38:53:3a:
7c:9e:30:25:29:d3:20:8b:7b:6c:11:1d:9e:2e:69:e6:fa:c7:
e8:ac:26:7e:b2:a6:b3:9b:6a:63:fe:b3:6c:bd:d6:09:be:f6:
a3:59:f3:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIDAkVIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwOTE0MTcxNloXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVD
QUI1OEEyMTQ1NzA3M0UxN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdeleqtz7DKVupkx6iJ3OL7D7u/a1/E55RiCaym+N08lBNXECrELqcXOG6hGJg
rSwrjb0d6xhNIt7K2NjpDfHnt8kFPKykFDxS+u5y/KJo4DH5W5r/FtripH3TJOPR
9LBijCsBFeKgP+i/z4zvIC8JKwJRwp9+MVNA+oD9Tsf/b3ekQ5vALnLQPS/iDtL3
a7Uj1a/MnEBE9lQKKtVn+qw7O/J8zlYQSQnlQsl4J2lraCIrzFN3K1y2cbZ6Jg49
mE4rTGfvwhq3YtR+yI5RxDjHccvuYZc5LhZeEckzyIF/KrP3+8dlT4qYgc+Rtdg2
jHcsGn1JlLUqrqmPoEOtj5HPAgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUez9g2bGi
gAKgeHXKtYohRXBz4X8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQyNTRDLzVBNTY0RDQ4MTlFODExRThCOTY1MEM3RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MjU0Qy81QTU2NEQ0ODE5RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJH
aWdBS2dlSFhLdFlvaFJYQno0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJwUwSAYIKwYBBQUHAQcBAf8EOTA3MCYEAgABMCAwDAMEBBtv0AMEBBtv
4AMEBmVhQAMEAnZntAMEBcpPwDANBAIAAjAHAwUBJAOxADANBgkqhkiG9w0BAQsF
AAOCAQEAMhk5gzR/U8s0rk+umUO8PMYnIKDGXiwAH8gMAwtF/qOo1glhU/a+abad
h+Xo58ZSGXmm/1/g5CAyGp9Htj+6ARf1lvr0l9O3zEFuHaRMiKpEYGzgcHuqDiH4
GESbltUmFA6x/pt7Mgn61OoNmylqpZjEYqpzuAd81L9dHJTlVHWvZ5ZjxH/CNFMd
PwQ+8ZxC2rkQvSg1xIvQa/091e6BimxfDWz8zx8d4fuIgHRU2OjQxT9npgwKPxj7
e35A9RARUclthwdRfm3ixSa5nD3xYBaJPV4BOFM6fJ4wJSnTIIt7bBEdni5p5vrH
6KwmfrKms5tqY/6zbL3WCb72o1nz0g==
-----END CERTIFICATE-----
Generated at Tue May 13 01:45:49 2025 by rpki-client