Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
File: 76axB-8ZSk3WeyjVVYARdcz3FEU.cer (raw, json)
Hash identifier: i/NLHo3kmqaOQ477nQxWLmmMmBqEB7iZC92pH8FkTSM=
Subject key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023E79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Apr 2025 20:15:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 140324
IP: 103.149.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147065 (0x23e79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 20:15:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:9f:46:2b:a8:80:f6:24:96:47:c9:a9:77:
74:ba:96:c3:2b:cb:a6:5e:cc:19:ca:ec:c0:56:90:
2b:2e:47:35:ea:06:5e:df:e8:d5:f1:a0:8b:a9:99:
c6:37:8c:45:bb:27:76:23:08:c9:ab:e0:9b:68:da:
f6:d1:e5:c9:a6:d5:b2:25:cb:93:1d:66:a8:3e:e7:
b8:f9:ff:10:d2:47:03:8a:71:2d:ca:2b:8c:06:4f:
77:29:15:07:a4:e3:99:42:85:c5:68:97:96:fb:90:
f0:e6:ca:b5:2d:0d:2e:63:66:2a:f3:62:31:5c:61:
7c:f2:b4:5a:6a:e4:d6:d1:f7:cf:f6:66:53:4d:38:
ea:b1:1b:42:70:23:19:13:cd:79:96:10:67:e3:7a:
93:8c:1d:f2:ba:7b:00:09:cc:d7:fc:0c:86:e8:33:
dc:24:50:18:8e:c1:80:c4:d6:44:1f:01:2a:70:0b:
d6:fc:63:94:04:ea:73:df:b3:38:3f:14:54:49:10:
3f:81:47:34:a8:04:5b:06:6e:1f:b3:fe:5a:cf:02:
0e:ce:f0:ef:01:3e:28:46:79:ec:96:1a:a6:63:e0:
4b:aa:74:ce:e4:8d:d3:f5:cc:40:6c:f2:1e:49:20:
8d:6c:fe:f5:e0:e9:c5:90:74:7b:10:bf:cb:32:5c:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140324
sbgp-ipAddrBlock: critical
IPv4:
103.149.204.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:ef:c7:06:92:26:b8:f9:f3:a0:5e:ee:e3:4d:7c:1c:20:46:
ea:66:25:99:8a:b0:2f:01:bb:d3:97:b5:fe:9b:a7:23:1f:25:
8f:38:11:ea:36:16:c8:9b:90:db:8c:4e:f7:d4:4c:93:51:6b:
df:b1:35:a0:99:af:d1:8b:b9:fb:d5:5f:c3:a9:cc:65:47:1e:
e5:ef:6c:52:a3:5e:a1:f5:db:5e:93:cf:0d:0e:55:37:b9:30:
4b:5d:c3:03:fb:79:c4:4b:6c:1e:88:ae:9c:2e:dd:5d:00:5c:
e3:39:28:28:e7:11:3f:70:cc:e7:c6:29:5f:eb:44:5d:e5:17:
0e:93:48:34:cc:68:0d:45:df:6d:f5:90:70:23:e6:a0:48:5d:
89:a5:c9:d3:5a:04:20:2f:ff:de:9b:5f:ac:cd:77:c6:2d:54:
f1:c2:df:d5:75:e6:ba:61:ab:9f:64:78:83:fb:d0:05:b3:fe:
54:4b:58:53:9b:bb:9c:c1:44:81:3b:5a:19:4a:75:0f:92:ce:
d7:3c:3d:c3:90:1b:59:8f:09:73:0b:c0:6f:24:09:30:6f:3c:
46:99:b4:ae:28:59:aa:ed:d0:df:9e:37:cb:53:dd:24:d5:96:
53:54:a3:c9:c5:d2:55:0c:7d:61:6a:97:bb:8e:41:e8:04:79:
42:21:1a:0f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAj55MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQxMDIwMTUzMVoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhE
NTU1ODAxMTc1Q0NGNzE0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK5J9GK6iA9iSWR8mpd3S6lsMry6ZezBnK7MBWkCsuRzXqBl7f6NXxoIupmcY3
jEW7J3YjCMmr4Jto2vbR5cmm1bIly5MdZqg+57j5/xDSRwOKcS3KK4wGT3cpFQek
45lChcVol5b7kPDmyrUtDS5jZirzYjFcYXzytFpq5NbR98/2ZlNNOOqxG0JwIxkT
zXmWEGfjepOMHfK6ewAJzNf8DIboM9wkUBiOwYDE1kQfASpwC9b8Y5QE6nPfszg/
FFRJED+BRzSoBFsGbh+z/lrPAg7O8O8BPihGeeyWGqZj4EuqdM7kjdP1zEBs8h5J
II1s/vXg6cWQdHsQv8syXLe9AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU76axB+8Z
Sk3WeyjVVYARdcz3FEUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNGRkQ3LzdCNDA5Q0EwMkZBOTExRUJCOTBCQkE4NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDRkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04
WlNrM1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiQkMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5XMMA0GCSqG
SIb3DQEBCwUAA4IBAQC378cGkia4+fOgXu7jTXwcIEbqZiWZirAvAbvTl7X+m6cj
HyWPOBHqNhbIm5DbjE731EyTUWvfsTWgma/Ri7n71V/DqcxlRx7l72xSo16h9dte
k88NDlU3uTBLXcMD+3nES2weiK6cLt1dAFzjOSgo5xE/cMznxilf60Rd5RcOk0g0
zGgNRd9t9ZBwI+agSF2JpcnTWgQgL//em1+szXfGLVTxwt/Vdea6YaufZHiD+9AF
s/5US1hTm7ucwUSBO1oZSnUPks7XPD3DkBtZjwlzC8BvJAkwbzxGmbSuKFmq7dDf
njfLU90k1ZZTVKPJxdJVDH1hape7jkHoBHlCIRoP
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:45:30 2025 by rpki-client