Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer
File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer (raw, json)
Hash identifier: VLREAYcIQuZg67vSxpxTu6kIadbGc8x/JnengIlGaNY=
Subject key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023870
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Mar 2025 17:36:23 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 38473
IP: 202.20.102.0 -- 202.20.104.255
IP: 2001:df0:77::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145520 (0x23870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 19 17:36:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:59:a4:d2:c9:ef:dd:29:a3:92:51:a8:c1:
05:cb:ab:31:13:d1:ca:10:0e:28:00:5b:ce:e8:74:
3c:39:b1:6e:30:27:42:21:56:02:32:5b:1c:2c:32:
3f:a0:0c:e8:68:37:9c:f5:fa:5f:fc:df:c5:19:b7:
cf:22:fb:ec:5a:19:de:5c:27:46:c7:60:28:12:42:
48:d4:e1:8c:ec:54:b9:84:ba:df:2b:57:cc:43:60:
bf:ce:84:b3:9c:07:bc:a1:53:a5:f3:b0:90:f2:ec:
3a:52:fe:83:f0:ba:9f:3a:ed:40:d5:79:b5:9e:3e:
20:47:a7:ec:56:6f:f6:8b:31:b4:64:9e:1e:5a:f5:
87:2d:6a:04:e6:f1:e7:c7:4f:61:59:2d:09:b5:cc:
ba:4d:a3:64:cf:00:52:86:7b:80:ce:ee:2f:f9:f6:
09:36:b9:7a:9d:b6:97:91:15:d9:ae:81:56:09:69:
ef:ec:3f:08:b6:9e:1e:dd:53:f5:7b:76:d2:7b:59:
05:8a:26:93:36:31:a6:1d:f1:86:8e:b1:a2:df:fe:
95:e5:b6:45:fd:51:f3:41:34:7d:c5:88:66:01:65:
5b:c2:3a:8c:d8:61:ec:fe:3b:04:3b:f8:4f:84:69:
00:26:2f:62:43:ce:9e:b2:41:c2:e7:4e:dc:ce:81:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38473
sbgp-ipAddrBlock: critical
IPv4:
202.20.102.0-202.20.104.255
IPv6:
2001:df0:77::/48
Signature Algorithm: sha256WithRSAEncryption
67:a4:01:6a:76:57:a9:08:09:c1:ea:fb:20:a8:ab:3d:07:60:
35:58:1e:8c:a8:b3:9e:13:62:39:5e:65:20:e2:1f:a8:98:3b:
5a:12:e8:24:1b:49:4a:0f:a4:d1:0b:5d:f9:fa:d1:1a:b5:50:
5c:74:b4:b7:57:a9:b8:68:3c:b1:bd:c5:5b:c2:96:31:a7:2b:
37:c9:71:d4:e0:d0:27:b0:85:0a:a9:3d:ec:93:ef:ab:33:77:
57:b5:d1:7c:7c:72:b6:a2:e2:dc:da:27:f6:f5:ac:49:87:30:
f2:8e:27:72:da:9d:71:66:ea:f5:3c:2f:72:9d:9b:5a:f9:10:
d0:f3:64:a1:9e:e6:5a:45:cf:8e:56:a2:b0:42:bd:0b:28:b5:
76:f5:d1:f2:33:67:3f:41:68:f8:94:3e:c5:d0:02:fe:84:31:
55:48:ed:36:6b:1a:ab:62:25:ea:22:10:a5:93:fe:83:af:02:
55:35:df:76:9a:ea:eb:23:11:57:52:43:c4:11:8d:d5:ce:d7:
f3:ae:2a:02:e6:75:2d:eb:6f:99:5f:19:4a:3c:06:a3:03:98:
fa:9c:b4:96:5e:1a:dc:67:c5:e8:b7:13:19:52:70:58:40:52:
25:de:c9:3c:3e:31:7d:dd:a8:78:8e:29:d5:01:2e:27:0e:77:
d8:9c:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:57:04 2025 by rpki-client