Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
File: M_QIIWaon_9vMmrgm0S_vvFin-s.cer (raw, json)
Hash identifier: eT3XRfcu4dDpxDXnyTG68/Atpa3Yt1qvaB/08O501uM=
Subject key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D6C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A91905300000/9/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Tue 10 Jun 2025 17:07:51 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 9913
IP: 103.233.208.0/22
IP: 202.14.148.0/24
IP: 203.0.80.0/24
IP: 203.1.68.0/23
IP: 203.31.110.0/23
IP: 203.57.23.0/24
IP: 2400:9c20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150892 (0x24d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 17:07:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:0a:5a:80:2d:26:c2:12:25:bf:aa:bd:bd:
37:3b:73:29:21:0c:ad:f5:87:37:ea:ea:3c:35:a5:
6c:0b:f9:3a:9a:2f:94:08:a6:54:7c:21:62:59:56:
41:27:96:ee:20:1b:64:3f:35:f9:94:43:80:04:16:
b8:2a:a4:94:35:c8:d2:cf:14:4c:6f:4a:bf:6b:a6:
0c:9a:69:c0:ec:56:e0:95:72:4c:e5:82:0c:43:f2:
79:a3:a0:bf:7d:e5:4a:ee:57:25:1c:08:1c:49:8f:
3e:bb:34:d8:a5:09:a4:c9:ab:8f:28:47:bf:55:a8:
46:b7:49:c8:f2:a1:87:bc:28:71:bf:0d:95:76:29:
4d:fb:1a:2b:3e:82:5a:0c:3d:33:81:a2:28:93:62:
c0:01:ab:4b:6e:e5:47:0b:6f:3f:bd:63:4a:f8:ed:
e0:91:c1:9a:69:97:4e:3f:00:28:e2:5b:54:cd:c5:
67:d5:1c:ae:4c:b8:9b:ec:42:22:8c:6d:01:5a:1d:
23:a2:83:8b:11:61:d1:c8:b3:08:00:67:a5:15:84:
e2:cb:d5:01:89:b4:40:ca:5f:02:58:8e:64:b5:86:
c9:f1:4b:23:54:e6:c9:e8:cd:91:6e:88:fb:54:62:
55:32:f8:8d:77:dc:11:6d:8d:98:59:c3:7f:3e:d7:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9913
sbgp-ipAddrBlock: critical
IPv4:
103.233.208.0/22
202.14.148.0/24
203.0.80.0/24
203.1.68.0/23
203.31.110.0/23
203.57.23.0/24
IPv6:
2400:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
38:c6:17:ab:3e:b7:53:72:5a:72:0d:06:e1:4d:e5:33:7f:84:
18:b1:2f:06:54:5f:2b:a4:91:16:69:cb:42:a0:11:f1:89:f3:
78:51:01:27:2d:fc:96:ba:52:fb:ea:d5:93:b7:95:c6:11:ae:
bd:cb:00:9d:d2:80:43:f5:c6:61:df:ad:81:a2:ae:23:a1:cb:
60:cd:c9:0c:87:23:3d:39:87:48:09:01:2d:c2:f6:ff:40:43:
2e:ef:76:da:f3:27:0e:3e:57:77:6e:69:48:53:a5:5f:61:b7:
6f:8a:b4:3b:78:3f:9d:3f:94:6e:35:ea:42:b9:cc:2c:d4:d7:
d5:7d:15:26:a6:f5:fb:18:03:97:a5:8d:fd:04:76:f9:47:93:
5d:5c:56:be:0d:7f:5a:36:03:19:2a:1f:47:63:cc:4c:f2:f3:
68:21:96:3f:50:8f:17:6f:a4:69:f6:1f:55:38:10:b9:d5:9f:
43:16:3b:f3:d0:f3:63:63:78:b5:9b:6e:11:0a:4a:d7:c9:72:
df:83:92:b2:24:d0:b1:c8:ba:ac:72:23:cf:48:60:71:17:2e:
e0:46:88:f0:3b:b8:59:49:38:fe:8f:b6:fd:e5:2a:a6:fb:e2:
ab:13:e8:c6:b4:81:3d:fe:d4:41:1e:e0:94:a8:d8:f4:c2:be:
e3:19:3f:9c
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIDAk1sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYxMDE3MDc1MVoXDTI2MDgzMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2QTg5RkZGNkYz
MjZBRTA5QjQ0QkZCRUYxNjI5RkVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAjFEKWoAtJsISJb+qvb03O3MpIQyt9Yc36uo8NaVsC/k6mi+UCKZUfCFi
WVZBJ5buIBtkPzX5lEOABBa4KqSUNcjSzxRMb0q/a6YMmmnA7FbglXJM5YIMQ/J5
o6C/feVK7lclHAgcSY8+uzTYpQmkyauPKEe/VahGt0nI8qGHvChxvw2VdilN+xor
PoJaDD0zgaIok2LAAatLbuVHC28/vWNK+O3gkcGaaZdOPwAo4ltUzcVn1RyuTLib
7EIijG0BWh0jooOLEWHRyLMIAGelFYTiy9UBibRAyl8CWI5ktYbJ8UsjVObJ6M2R
boj7VGJVMviNd9wRbY2YWcN/PtdGCwIDAQABo4IDDTCCAwkwHQYDVR0OBBYEFDP0
CCFmqJ//bzJq4JtEv77xYp/rMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5
MDUzMDAwMDAvOS8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxOTA1MzAwMDAwLzkvMzNGNDA4MjE2NkE4OUZGRjZG
MzI2QUUwOUI0NEJGQkVGMTYyOUZFQi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgB
Af8ECjAIoAYwBAICJrkwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAJn6dAD
BADKDpQDBADLAFADBAHLAUQDBAHLH24DBADLORcwDQQCAAIwBwMFACQAnCAwDQYJ
KoZIhvcNAQELBQADggEBADjGF6s+t1NyWnINBuFN5TN/hBixLwZUXyukkRZpy0Kg
EfGJ83hRASct/Ja6Uvvq1ZO3lcYRrr3LAJ3SgEP1xmHfrYGiriOhy2DNyQyHIz05
h0gJAS3C9v9AQy7vdtrzJw4+V3duaUhTpV9ht2+KtDt4P50/lG416kK5zCzU19V9
FSam9fsYA5eljf0EdvlHk11cVr4Nf1o2AxkqH0djzEzy82ghlj9QjxdvpGn2H1U4
ELnVn0MWO/PQ82NjeLWbbhEKStfJct+DkrIk0LHIuqxyI89IYHEXLuBGiPA7uFlJ
OP6Ptv3lKqb74qsT6Ma0gT3+1EEe4JSo2PTCvuMZP5w=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:43:58 2025 by rpki-client