Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
File: -YvpQtnreFakMNG8KUc7xN1nf-o.cer (raw, json)
Hash identifier: o5gRoTsm14SKlVOaj1ELnnVScUSvg9grS/ynQA1PvsU=
Subject key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 692A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Jul 2025 19:20:04 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.22.144.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26922 (0x692a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 30 19:20:04 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:06:97:06:5c:15:33:04:6a:4c:8d:e9:b8:
08:87:58:fa:0d:e3:cc:df:1f:13:ae:11:a0:02:55:
0d:a4:a5:dc:a7:a6:89:94:0b:14:ef:5e:22:09:9f:
3a:79:93:2a:25:d6:0e:f2:2e:fe:1a:db:60:e6:4c:
e5:47:29:43:24:44:cf:ab:7d:af:d4:9a:5f:33:52:
1a:28:33:83:4f:9f:d9:5b:80:b2:1b:35:52:8b:39:
f5:34:78:40:d1:2f:de:97:e3:4b:38:7d:b6:71:4a:
df:b3:15:76:eb:22:87:aa:b8:7d:8c:32:51:97:d5:
7a:f6:1a:d0:62:f0:9d:27:49:e3:c5:c7:81:39:9e:
92:33:4d:ba:9b:2f:fa:8d:8e:d8:1a:5b:9a:94:e8:
51:03:e0:69:43:cd:0f:30:4c:e1:9b:0f:0b:31:1f:
74:3f:0e:8e:d4:3f:25:e0:a9:cf:a5:98:0e:ff:39:
bd:ac:e8:80:29:fc:c2:96:96:20:7d:89:3e:ca:05:
b5:b9:79:e8:87:85:81:ef:af:c7:71:a9:1d:55:56:
75:bb:c9:bd:a0:a0:cb:bb:3c:4d:7d:71:f0:b4:33:
08:88:98:f0:ef:8f:43:46:df:79:ff:ba:95:12:6b:
7e:af:44:fa:e7:64:ee:5e:5e:dc:2b:d9:5c:4b:76:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:06:f6:3c:c4:92:f5:a2:fa:dd:b9:39:dd:12:8a:ab:ad:
7a:94:0e:9f:9d:18:c9:a0:a6:b4:ce:4d:04:f1:f9:28:ec:53:
3c:08:5c:b7:5a:88:e6:e4:57:4e:87:2d:22:55:2e:07:dc:4c:
ea:14:55:81:1a:fd:db:cd:65:01:25:b8:fb:3a:cb:f5:65:8b:
42:d2:fb:e2:8f:81:32:7e:24:cd:6e:2b:dd:a1:1a:20:ba:db:
9c:c9:26:39:85:a7:ea:97:d8:1e:01:59:52:56:1a:b6:f5:f4:
91:b5:41:ae:78:31:5d:4f:fe:eb:44:79:75:5a:5b:fa:1c:fe:
cc:8d:62:3e:72:05:fa:b0:58:5a:03:0f:95:a6:bd:bd:f9:5a:
6c:b0:73:73:e8:df:40:59:26:db:9c:2b:fa:5b:e5:87:2a:6a:
61:05:9c:ac:54:75:3e:76:3e:37:9d:c6:3d:bf:ff:26:24:59:
12:a0:91:d6:d7:dc:f3:e0:a9:8a:3d:80:ea:c2:da:51:c7:bb:
d6:5f:3c:ad:7a:4d:8a:a2:2a:7f:df:e2:74:ee:fc:b8:76:75:
c5:09:f0:20:46:4e:b7:7a:1c:89:b4:e8:31:2e:7b:a0:12:84:
0d:f3:0e:93:52:eb:69:d3:36:c6:b3:51:0f:61:37:93:96:8c:
82:45:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:51 2025 by rpki-client