Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
File: E7lE6lgzzbdBH9TsaqHJYs87CIA.cer (raw, json)
Hash identifier: gGHsOvmA3HiKfcQzF2P4ShEPBH2gBkcI81TL/3Y/v2s=
Subject key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4A95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Mar 2025 20:20:41 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 35820
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19093 (0x4a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 2 20:20:41 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:77:ad:b6:35:31:9f:79:2d:4b:e2:ed:f8:
27:ea:09:95:87:80:c9:ca:9c:48:13:43:33:7d:7f:
2c:7f:78:fa:a7:5d:5f:e2:53:9f:27:da:bd:65:97:
0c:5f:49:0a:65:73:db:cb:23:90:16:13:3e:2b:1f:
3b:b4:c7:ea:c9:69:38:93:92:43:d3:00:3f:61:01:
56:58:02:77:83:ee:5c:d7:e8:cb:18:d8:6c:17:bb:
b3:a1:d6:14:32:bc:b9:55:a3:51:66:80:8f:2e:8c:
5e:72:87:a0:a2:f6:49:20:d5:32:b6:13:d0:ed:0c:
47:b9:4a:bc:64:5e:5d:42:a9:d0:9a:db:2a:17:3c:
82:b9:be:81:a1:ca:16:aa:6c:20:46:21:0c:aa:0d:
a4:02:9b:e5:fa:f9:a5:57:71:14:ed:a7:87:4c:ea:
f5:43:16:ab:95:08:1e:a9:e2:37:1c:18:94:4f:11:
fd:78:2c:0c:a0:e3:13:1e:53:a6:a2:f1:36:20:d4:
c0:87:09:79:bb:5b:2c:3a:5d:ed:2d:b9:c3:6a:5c:
c4:63:fd:57:16:c8:b3:f5:c1:53:d6:3e:32:fd:30:
7e:73:ca:a0:ae:5c:1a:52:82:db:e5:12:1d:2f:3e:
37:8b:a7:2d:16:dc:d2:5b:1b:5d:8c:42:df:de:12:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35820
Signature Algorithm: sha256WithRSAEncryption
39:12:f3:cb:62:ba:9b:f1:86:f9:ae:fa:cd:2d:36:1d:5f:e4:
4a:97:ff:29:35:b3:19:0e:d9:8f:07:2b:f1:ca:a6:d0:77:ea:
68:8d:56:c4:a4:6a:17:fa:b5:d7:ca:01:51:ed:6b:77:f4:8f:
74:fa:ca:70:2d:0c:92:2d:3d:10:c1:41:ab:69:59:93:91:d3:
33:18:e1:69:ac:51:0b:da:a7:9c:c6:10:29:85:c3:a4:e2:53:
39:ec:d5:6c:1c:84:43:e0:32:de:49:d5:25:a1:92:39:a9:c0:
f8:31:3a:be:d0:9b:98:9a:7b:b2:b3:7c:79:f1:a5:d2:60:2f:
a1:55:8b:a0:e1:c9:74:57:ff:c9:6f:51:a2:76:ea:f7:4f:43:
21:1a:70:34:b8:15:cd:34:40:ed:8c:ba:05:12:ca:a6:86:f4:
aa:8f:0c:43:fb:e2:3f:4d:e4:23:58:d1:14:94:ec:cb:2d:59:
3d:bb:d2:4c:2e:7e:69:84:b1:49:7b:c1:f8:c5:3f:ea:4f:bc:
fe:7c:43:bb:84:67:74:1f:a8:ec:cc:97:4e:fc:de:93:be:f9:
94:da:d1:6c:1b:57:53:20:23:8a:df:5e:6d:37:95:9b:b6:5c:
80:3c:ce:d2:1e:74:9d:8e:37:74:59:67:a2:a2:0c:48:9c:60:
05:2c:1d:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgICSpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjUwMzAyMjAyMDQxWhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGQ0Y0NDExMC8GA1UEBRMoMTNCOTQ0RUE1ODMzQ0RCNzQxMUZENEVD
NkFBMUM5NjJDRjNCMDg4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJ+Cd622NTGfeS1L4u34J+oJlYeAycqcSBNDM31/LH94+qddX+JTnyfavWWXDF9J
CmVz28sjkBYTPisfO7TH6slpOJOSQ9MAP2EBVlgCd4PuXNfoyxjYbBe7s6HWFDK8
uVWjUWaAjy6MXnKHoKL2SSDVMrYT0O0MR7lKvGReXUKp0JrbKhc8grm+gaHKFqps
IEYhDKoNpAKb5fr5pVdxFO2nh0zq9UMWq5UIHqniNxwYlE8R/XgsDKDjEx5TpqLx
NiDUwIcJebtbLDpd7S25w2pcxGP9VxbIs/XBU9Y+Mv0wfnPKoK5cGlKC2+USHS8+
N4unLRbc0lsbXYxC394S7rMCAwEAAaOCAu4wggLqMB0GA1UdDgQWBBQTuUTqWDPN
t0Ef1OxqoclizzsIgDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkNGNDQvRTIxOUM2MzhBRTE1MTFFRkIzMDI5ODNFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZDRjQ0L0UyMTlDNjM4QUUxNTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6
emJkQkg5VHNhcUhKWXM4N0NJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMAi+wwDQYJKoZIhvcNAQELBQADggEBADkS88tiupvxhvmu+s0tNh1f5EqX
/yk1sxkO2Y8HK/HKptB36miNVsSkahf6tdfKAVHta3f0j3T6ynAtDJItPRDBQatp
WZOR0zMY4WmsUQvap5zGECmFw6TiUzns1WwchEPgMt5J1SWhkjmpwPgxOr7Qm5ia
e7KzfHnxpdJgL6FVi6DhyXRX/8lvUaJ26vdPQyEacDS4Fc00QO2MugUSyqaG9KqP
DEP74j9N5CNY0RSU7MstWT270kwufmmEsUl7wfjFP+pPvP58Q7uEZ3QfqOzMl078
3pO++ZTa0WwbV1MgI4rfXm03lZu2XIA8ztIedJ2ON3RZZ6KiDEicYAUsHb0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:21 2025 by rpki-client