Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
File: xQo91YIWmexaCS_v5V5AfVvQy6U.cer (raw, json)
Hash identifier: W06PQQz673yipFUt2eT3QfuHGYdTgsl+MYDT/WumZAs=
Subject key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Apr 2025 18:57:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24030
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147352 (0x23f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 18:57:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:24:5c:00:07:fa:0e:8d:14:0c:ed:e6:e1:
b4:0f:00:1e:27:19:b6:e0:df:97:66:1f:58:ec:54:
15:4f:61:b9:85:0e:53:22:68:62:a6:8c:1d:48:dc:
52:e0:09:9a:1d:af:27:a8:93:7d:0f:b0:57:24:67:
01:42:66:8e:67:79:73:2c:d5:e4:9c:da:60:06:48:
cc:ce:e6:76:08:d6:d4:c4:d5:58:b3:6b:62:e9:ce:
c3:51:0b:08:4d:25:4c:9e:d0:f2:bb:7a:de:3b:5c:
1c:55:c1:10:20:13:22:99:10:b3:24:0a:2d:e9:f6:
dd:24:23:e8:7e:15:13:8e:cd:66:10:1c:28:92:66:
e8:a1:4c:24:36:b0:06:be:d8:0d:cb:f9:7b:e1:4c:
de:ab:7e:25:4d:2a:c2:95:2b:3e:d9:57:6a:be:ee:
2e:56:61:94:0d:2e:8c:c2:80:e3:c8:bf:ca:ff:1c:
21:36:e1:cd:16:df:62:c3:6b:c5:3d:92:e4:ea:0d:
5b:2a:54:16:cf:14:3d:2c:d3:30:5b:68:ba:3e:f7:
75:dd:61:78:6a:d1:05:e1:c2:fa:70:a9:2e:bf:4a:
1f:94:c2:f9:ad:f6:c9:32:3e:a5:23:6e:91:5c:18:
d5:48:66:db:4c:62:d7:ea:9f:e9:5c:90:b4:a3:3b:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24030
Signature Algorithm: sha256WithRSAEncryption
b0:a0:57:0c:da:1b:e4:b7:ee:3c:ad:0e:4e:ba:70:26:72:75:
21:e4:86:a1:c1:9b:32:88:6e:ab:31:2a:8f:9d:9d:eb:bd:c4:
eb:41:f6:a0:3f:8a:5a:74:27:36:86:67:c1:32:79:a9:b9:c5:
6d:82:1f:01:c4:64:f8:87:8b:52:5b:eb:4d:f5:1c:4d:52:05:
97:ab:d3:00:30:9f:a3:bf:f4:fc:c8:e6:de:8c:b1:78:bc:ae:
44:81:84:23:bb:b5:3e:0b:c5:af:d1:81:ab:85:21:a1:69:5d:
70:22:34:b7:1c:dc:82:15:a0:82:b7:5c:13:13:fe:7f:5e:69:
48:a9:80:9f:2a:67:f6:49:d6:2f:96:45:36:b3:28:14:48:d8:
e8:34:a3:de:5c:bb:93:d7:94:de:5b:1f:fd:04:e2:84:5e:8d:
0d:40:75:22:bf:3b:e5:59:d1:fe:94:87:1d:6e:0a:e0:34:fe:
fe:d7:71:38:53:58:11:52:8e:87:86:de:c5:1f:ed:ba:48:69:
ad:72:76:a8:40:c1:fe:26:32:58:82:eb:84:3a:81:6e:57:b1:
d8:e3:a4:0e:b8:5c:f1:ef:e8:b2:e7:95:17:f5:dd:60:f8:12:
39:a0:26:34:1b:54:e9:61:be:86:57:a2:16:80:f3:02:15:b8:
c4:65:43:fe
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIDAj+YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQxNzE4NTc1NloXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZF
RkU1NUU0MDdENUJEMENCQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLOiRcAAf6Do0UDO3m4bQPAB4nGbbg35dmH1jsVBVPYbmFDlMiaGKmjB1I3FLg
CZodryeok30PsFckZwFCZo5neXMs1eSc2mAGSMzO5nYI1tTE1Viza2LpzsNRCwhN
JUye0PK7et47XBxVwRAgEyKZELMkCi3p9t0kI+h+FROOzWYQHCiSZuihTCQ2sAa+
2A3L+XvhTN6rfiVNKsKVKz7ZV2q+7i5WYZQNLozCgOPIv8r/HCE24c0W32LDa8U9
kuTqDVsqVBbPFD0s0zBbaLo+93XdYXhq0QXhwvpwqS6/Sh+Uwvmt9skyPqUjbpFc
GNVIZttMYtfqn+lckLSjOxFLAgMBAAGjggLtMIIC6TAdBgNVHQ4EFgQUxQo91YIW
mexaCS/v5V5AfVvQy6UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMyRTQxLzg3NTc1MThFMURBNDExRTJCOTIxOUU5QTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDMkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJ
V21leGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICXd4wDQYJKoZIhvcNAQELBQADggEBALCgVwzaG+S37jytDk66cCZydSHk
hqHBmzKIbqsxKo+dneu9xOtB9qA/ilp0JzaGZ8Eyeam5xW2CHwHEZPiHi1Jb6031
HE1SBZer0wAwn6O/9PzI5t6MsXi8rkSBhCO7tT4Lxa/RgauFIaFpXXAiNLcc3IIV
oIK3XBMT/n9eaUipgJ8qZ/ZJ1i+WRTazKBRI2Og0o95cu5PXlN5bH/0E4oRejQ1A
dSK/O+VZ0f6Uhx1uCuA0/v7XcThTWBFSjoeG3sUf7bpIaa1ydqhAwf4mMliC64Q6
gW5XsdjjpA64XPHv6LLnlRf13WD4EjmgJjQbVOlhvoZXohaA8wIVuMRlQ/4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:49:10 2025 by rpki-client