Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.cer (raw, json)
Hash identifier: 2tdtWpvMSvEKL/OpN7A1terigPeq9+CkZdY9oItIk4M=
Subject key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Jun 2025 16:25:40 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.150.180.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151400 (0x24f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 20 16:25:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:30:f7:3d:ad:53:e2:3f:e2:98:75:1d:86:
ad:01:51:87:f8:4e:40:1f:de:e3:d0:5c:00:6b:e6:
6d:73:de:fb:c8:d0:88:58:53:a7:93:e1:b8:8b:15:
cb:eb:6b:f9:5a:4f:8f:87:72:1e:71:31:e0:82:27:
07:da:f5:86:87:b6:33:4c:48:6d:87:eb:47:86:56:
2f:71:12:c9:11:2c:d0:0e:25:66:98:1b:d1:c8:74:
da:64:ab:66:fd:fa:d6:26:ea:a0:a4:e9:85:7f:a1:
86:56:64:43:e3:8b:10:0d:c3:42:db:6e:0f:d6:70:
fd:84:bd:97:27:95:8c:89:d5:7e:b2:a3:65:b0:11:
05:35:b2:3d:2a:16:24:e7:3d:26:b4:e4:38:34:83:
16:0f:ed:23:f5:86:df:67:b0:7f:59:08:2a:7d:80:
4f:ef:80:01:0f:a9:ce:ac:a2:4a:1c:83:f4:4b:b9:
c1:49:99:eb:8a:64:27:85:07:ec:b5:80:14:2c:70:
33:93:e1:68:c2:9a:60:97:8b:65:01:9f:1d:d3:55:
05:b7:5b:7a:30:56:30:3f:37:8f:88:46:46:a8:92:
95:d4:45:25:4e:10:db:30:05:5a:5c:2d:3a:49:10:
52:82:b1:6f:47:89:4d:43:84:f6:ef:96:b5:50:f7:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.180.0/23
Signature Algorithm: sha256WithRSAEncryption
43:0f:1f:d2:02:6d:24:65:af:0b:fc:b8:90:43:57:b6:e5:2b:
c5:ac:b9:07:1d:0f:53:df:60:dd:7a:87:a6:b6:b2:28:49:b6:
fa:0a:9f:c5:fe:50:34:15:95:90:47:92:f1:95:f1:e1:e3:f2:
a5:10:21:8b:d5:6b:4f:ab:ab:42:98:b5:7a:c5:c2:2a:47:4c:
70:c4:cc:c2:e6:3e:14:22:de:95:a0:92:c4:7b:18:11:78:fb:
02:83:61:09:01:f3:d1:bd:93:ef:83:2a:1a:84:a6:c4:2c:a8:
00:c3:72:81:b3:00:bb:62:11:90:51:ac:af:5f:21:1c:da:33:
54:f5:4d:f3:e3:34:65:4c:8f:66:90:4c:a4:f5:32:6f:25:f0:
46:76:ab:6c:34:c1:09:73:88:cd:dc:94:f3:3b:26:57:6e:1b:
41:0b:76:a5:5b:27:0f:18:3d:7e:94:c8:c9:f9:e7:a8:80:bb:
ef:6c:4a:5d:b3:30:89:63:01:96:88:61:66:b3:01:24:72:89:
2e:ed:dc:2c:aa:0f:e0:45:ca:20:53:81:87:d9:86:8c:c8:93:
95:9b:36:3d:3b:a5:ba:78:91:42:d7:bb:42:cc:a1:ef:ff:45:
06:99:c7:a5:cd:06:ee:2c:b6:22:6a:ad:68:f4:4b:f5:d4:c4:
e7:db:a0:16
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAk9oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYyMDE2MjU0MFoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlF
Mjc3ODVDNjM4NUNDQ0Y5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFLTD3Pa1T4j/imHUdhq0BUYf4TkAf3uPQXABr5m1z3vvI0IhYU6eT4biLFcvr
a/laT4+Hch5xMeCCJwfa9YaHtjNMSG2H60eGVi9xEskRLNAOJWaYG9HIdNpkq2b9
+tYm6qCk6YV/oYZWZEPjixANw0Lbbg/WcP2EvZcnlYyJ1X6yo2WwEQU1sj0qFiTn
PSa05Dg0gxYP7SP1ht9nsH9ZCCp9gE/vgAEPqc6sokocg/RLucFJmeuKZCeFB+y1
gBQscDOT4WjCmmCXi2UBnx3TVQW3W3owVjA/N4+IRkaokpXURSVOENswBVpcLTpJ
EFKCsW9HiU1DhPbvlrVQ9wgFAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUfuca2Efp
1WgQzUnid4XGOFzM+WswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg0MUQyL0Y3MjIzRkI0ODQ1NDExRUE4RDZFMzUwRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVm
cDFXZ1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAFnlrQwDQYJKoZIhvcNAQELBQADggEBAEMPH9ICbSRlrwv8uJBD
V7blK8WsuQcdD1PfYN16h6a2sihJtvoKn8X+UDQVlZBHkvGV8eHj8qUQIYvVa0+r
q0KYtXrFwipHTHDEzMLmPhQi3pWgksR7GBF4+wKDYQkB89G9k++DKhqEpsQsqADD
coGzALtiEZBRrK9fIRzaM1T1TfPjNGVMj2aQTKT1Mm8l8EZ2q2w0wQlziM3clPM7
JlduG0ELdqVbJw8YPX6UyMn556iAu+9sSl2zMIljAZaIYWazASRyiS7t3CyqD+BF
yiBTgYfZhozIk5WbNj07pbp4kULXu0LMoe//RQaZx6XNBu4stiJqrWj0S/XUxOfb
oBY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:46 2025 by rpki-client