Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
File: ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer (raw, json)
Hash identifier: JQSxX4EtGrASIzwVXIsqRQvaeFT6QTRoYcGcnpHXA7Q=
Subject key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02413A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Apr 2025 03:34:15 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45597
IP: 203.176.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 May 2025 17:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147770 (0x2413a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 03:34:15 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:97:da:2e:b7:45:99:bf:7b:96:80:08:12:
02:4e:f7:01:13:5f:dc:e0:18:07:a4:4e:37:19:fb:
ce:9d:40:7d:4c:9d:31:5b:34:bf:db:ef:0d:87:90:
70:dc:78:b6:c5:c4:c7:e1:9d:90:b0:ab:cb:b1:81:
ab:ab:6d:84:cf:ad:a6:f0:81:43:95:8d:43:b9:0e:
a5:67:67:50:5e:a4:f6:68:84:9a:e6:a2:77:32:cf:
9d:c9:a5:87:4a:38:2f:f0:7f:9b:b5:3e:52:4b:af:
72:5f:49:e9:ea:50:b7:a5:9c:08:a3:78:9a:ee:e1:
7a:64:e8:c7:0e:5e:ae:a7:2e:c4:1c:c7:6f:22:ea:
4f:9f:f6:75:c9:41:a4:38:35:88:c2:37:fa:01:5b:
ad:e6:b6:22:a7:46:39:00:61:82:e9:cf:7d:2b:4f:
3c:a0:94:ff:60:23:6c:72:e1:8c:c8:57:5c:e7:c6:
36:33:1d:1e:35:51:40:aa:82:af:2f:39:9c:1e:21:
2f:36:f0:31:13:6e:80:d4:69:15:81:22:a8:89:50:
ed:79:27:94:e5:9f:3b:31:55:ba:78:f1:c4:6d:42:
3d:e5:7f:3a:91:e5:34:b4:38:ce:1e:06:8f:73:5d:
13:7d:7d:e3:8c:52:ed:fc:4f:88:0e:a2:61:11:55:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45597
sbgp-ipAddrBlock: critical
IPv4:
203.176.114.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:48:bc:b9:97:9a:37:dc:d3:bb:17:7e:a8:61:8a:45:68:0b:
67:1c:94:e5:45:53:d7:6f:81:4f:d4:b8:06:9c:92:91:95:90:
a4:08:7c:31:1a:8f:1f:bc:22:4c:71:3f:fd:64:a2:1c:f4:15:
20:54:be:27:b6:61:7e:ff:66:e7:57:2b:6f:c4:84:cf:5e:e1:
fb:24:3d:d3:a2:31:d2:c6:4f:f9:86:0e:f6:54:81:ea:58:8c:
a7:2c:d9:ca:02:5e:f4:a0:6d:cc:1a:33:b6:c0:3a:5b:29:2d:
37:04:35:a9:66:66:6e:0e:ab:62:69:a2:6c:c1:3d:9f:3b:a9:
53:00:ed:0d:cb:35:20:2c:de:bd:78:e7:70:38:d0:14:99:7b:
be:77:3d:8d:99:84:46:a6:19:13:08:a4:b8:2a:b3:10:50:99:
73:76:a6:a6:3a:0c:b7:16:3e:51:ab:eb:d0:e0:2e:3b:0d:f5:
7e:2c:41:7c:dc:29:fb:81:fd:e5:ef:12:19:b0:3e:d9:d4:b0:
38:9b:49:7f:e5:cc:72:61:79:57:68:d7:a1:f7:0b:1b:b5:85:
93:82:9a:74:fc:8e:51:8f:43:e3:ca:b5:c8:4b:4a:b7:ae:c0:
35:28:19:69:f1:8d:bf:29:0d:1f:c8:34:9a:13:6b:2b:e8:48:
4e:c0:80:32
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAkE6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQyODAzMzQxNVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTk2NTYxMTAvBgNVBAUTKEM5QzMwQjdDNTdFMkYwMTZEQjFGMDFD
MDlFNTkyRTA1MDQ3NEM5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq5ZfaLrdFmb97loAIEgJO9wETX9zgGAekTjcZ+86dQH1MnTFbNL/b7w2HkHDc
eLbFxMfhnZCwq8uxgaurbYTPrabwgUOVjUO5DqVnZ1BepPZohJrmoncyz53JpYdK
OC/wf5u1PlJLr3JfSenqULelnAijeJru4Xpk6McOXq6nLsQcx28i6k+f9nXJQaQ4
NYjCN/oBW63mtiKnRjkAYYLpz30rTzyglP9gI2xy4YzIV1znxjYzHR41UUCqgq8v
OZweIS828DETboDUaRWBIqiJUO15J5TlnzsxVbp48cRtQj3lfzqR5TS0OM4eBo9z
XRN9feOMUu38T4gOomERVcCTAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUycMLfFfi
8BbbHwHAnlkuBQR0yaYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk5NjU2L0E1RTdDRDc2MjNFMTExRjBBNjUwRUEyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5OTY1Ni9BNUU3Q0Q3NjIzRTExMUYwQTY1MEVBMjNDNEY5QUUwMi95Y01MZkZm
aThCYmJId0hBbmxrdUJRUjB5YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALIdMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy7ByMA0GCSqG
SIb3DQEBCwUAA4IBAQBdSLy5l5o33NO7F36oYYpFaAtnHJTlRVPXb4FP1LgGnJKR
lZCkCHwxGo8fvCJMcT/9ZKIc9BUgVL4ntmF+/2bnVytvxITPXuH7JD3TojHSxk/5
hg72VIHqWIynLNnKAl70oG3MGjO2wDpbKS03BDWpZmZuDqtiaaJswT2fO6lTAO0N
yzUgLN69eOdwONAUmXu+dz2NmYRGphkTCKS4KrMQUJlzdqamOgy3Fj5Rq+vQ4C47
DfV+LEF83Cn7gf3l7xIZsD7Z1LA4m0l/5cxyYXlXaNeh9wsbtYWTgpp0/I5Rj0Pj
yrXIS0q3rsA1KBlp8Y2/KQ0fyDSaE2sr6EhOwIAy
-----END CERTIFICATE-----
Generated at Mon May 12 04:25:06 2025 by rpki-client