Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
File: 09eD7kxpu1Bj-1z1smKLx77DdIo.cer (raw, json)
Hash identifier: XMV13PLo527vfPYF5ItIApGT6+xh2hzcyQ/2c/ybNr4=
Subject key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 662B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 20:22:57 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 160.187.112.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Jun 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26155 (0x662b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 5 20:22:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:b7:28:af:aa:62:3e:8f:da:76:77:d7:c0:
7f:5f:8f:53:fe:2e:26:05:a0:84:2c:39:a1:94:be:
f1:13:81:77:6c:d8:6e:9d:42:15:a1:ad:b7:82:e1:
d8:4d:bc:cc:85:cc:f8:a8:36:e0:94:b8:74:ab:34:
d6:1b:f2:24:79:44:72:d8:63:9a:20:ed:d1:5e:cc:
ee:61:03:a4:0d:47:9a:32:f6:11:d2:2d:2d:13:c8:
ef:14:b1:a8:3e:13:e4:3d:27:10:b2:02:fd:63:bd:
58:5d:f4:73:9f:7e:80:7f:ea:ae:c2:03:17:26:09:
58:1e:13:d8:8e:31:55:b5:df:a0:2d:16:6d:7c:83:
9e:97:0a:61:42:09:b9:ff:fa:01:ed:b2:28:81:94:
7d:4b:c7:f3:63:fa:43:95:3e:c4:4d:c4:6b:aa:59:
c2:a0:c7:f2:71:59:13:ff:2d:9f:f3:1a:72:60:b5:
4e:2c:e4:8a:56:53:ea:c0:da:c3:75:5e:e2:78:3e:
1b:0a:07:c5:b8:fe:35:6d:c4:a7:4b:cc:17:b0:1c:
9f:cf:54:d6:55:a8:63:c1:ad:14:9a:86:28:3e:cf:
31:f2:eb:d5:76:b2:3f:61:80:78:87:d7:38:9e:a5:
23:ad:79:3a:a9:47:51:76:59:4d:0a:28:87:c9:56:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e4:07:f3:00:dd:6e:40:c1:61:13:91:a1:4e:08:1a:86:10:
71:36:f1:2c:11:89:79:09:b7:ab:16:29:ad:b6:47:e1:db:1a:
9a:51:cb:18:49:fb:d1:1c:66:96:9d:57:72:88:97:b4:5e:76:
17:a5:e4:ad:1b:ae:17:c0:ae:d1:27:22:d1:09:f4:34:2e:0d:
37:64:55:6a:80:db:82:5d:68:13:98:d1:dc:f0:4c:ff:d7:91:
78:21:7d:82:90:52:fd:c7:a2:1c:4a:e3:e1:83:1b:b1:f7:c3:
81:25:78:15:54:f2:cf:05:43:9b:0c:ac:d7:d1:12:a5:2a:f0:
5b:d6:cc:70:74:78:44:00:28:e9:96:ae:fe:c8:e1:77:a6:e8:
ec:2e:8c:1f:57:8d:ee:d4:ae:b7:8a:8b:a6:2c:7b:8d:01:6e:
79:9f:e4:ef:40:63:4d:fa:8d:d0:d9:9e:fb:34:59:82:cf:7b:
8f:30:94:28:b7:07:47:a8:79:f7:0d:cb:60:4a:4f:70:71:16:
75:2a:3a:05:d1:a1:70:26:47:59:b3:23:41:16:82:5a:ac:db:
09:2b:ca:0c:5e:be:86:c8:d4:69:95:35:a6:34:f7:0d:b8:0c:
f9:41:c6:fb:fb:29:5c:03:7a:e1:fa:3f:1f:f3:ac:7d:1d:c3:
ea:db:d6:08
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICZiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNjA1MjAyMjU3WhcNMjYwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCOUE3NzExMC8GA1UEBRMoRDNENzgzRUU0QzY5QkI1MDYzRkI1Q0Y1
QjI2MjhCQzdCRUMzNzQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM1ltyivqmI+j9p2d9fAf1+PU/4uJgWghCw5oZS+8ROBd2zYbp1CFaGtt4Lh2E28
zIXM+Kg24JS4dKs01hvyJHlEcthjmiDt0V7M7mEDpA1HmjL2EdItLRPI7xSxqD4T
5D0nELIC/WO9WF30c59+gH/qrsIDFyYJWB4T2I4xVbXfoC0WbXyDnpcKYUIJuf/6
Ae2yKIGUfUvH82P6Q5U+xE3Ea6pZwqDH8nFZE/8tn/MacmC1TizkilZT6sDaw3Ve
4ng+GwoHxbj+NW3Ep0vMF7Acn89U1lWoY8GtFJqGKD7PMfLr1XayP2GAeIfXOJ6l
I615OqlHUXZZTQooh8lWdkcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTT14PuTGm7
UGP7XPWyYovHvsN0ijAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjlBNzcvQUI4NTM0NDA3QTNGMTFFRkExQzBFMDE2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5QTc3L0FCODUzNDQwN0EzRjExRUZBMUMwRTAxNkM0RjlBRTAyLzA5ZUQ3a3hw
dTFCai0xejFzbUtMeDc3RGRJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKC7cDANBgkqhkiG9w0BAQsFAAOCAQEAjOQH8wDdbkDBYRORoU4I
GoYQcTbxLBGJeQm3qxYprbZH4dsamlHLGEn70Rxmlp1XcoiXtF52F6XkrRuuF8Cu
0Sci0Qn0NC4NN2RVaoDbgl1oE5jR3PBM/9eReCF9gpBS/ceiHErj4YMbsffDgSV4
FVTyzwVDmwys19ESpSrwW9bMcHR4RAAo6Zau/sjhd6bo7C6MH1eN7tSut4qLpix7
jQFueZ/k70BjTfqN0Nme+zRZgs97jzCUKLcHR6h59w3LYEpPcHEWdSo6BdGhcCZH
WbMjQRaCWqzbCSvKDF6+hsjUaZU1pjT3DbgM+UHG+/spXAN64fo/H/OsfR3D6tvW
CA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:00:30 2025 by rpki-client