Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
File: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer (raw, json)
Hash identifier: aTCxM2c17eim82wS403NR2dK0WFg9e5JrHx7R6c3o5U=
Subject key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6894
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Jul 2025 12:44:26 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 165.101.240.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26772 (0x6894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 21 12:44:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:0e:aa:1f:1e:2e:24:a5:ba:73:f6:fd:c2:
85:48:15:26:1d:bd:1e:d1:9f:e9:da:99:ea:4c:7b:
68:02:cb:39:8d:7b:e8:75:ce:b7:ab:a7:9d:f0:41:
54:21:08:40:00:cc:2e:d6:29:04:41:2b:77:e1:d3:
d9:bf:64:76:9a:33:c8:09:ea:90:12:c4:30:48:7c:
f4:5a:1e:1d:50:39:49:4e:8c:8d:cd:ec:e3:0d:f1:
f6:bd:5d:be:9a:33:d6:c0:5d:64:6c:73:86:2c:41:
fd:51:f0:62:6b:7e:d3:26:03:4d:c7:24:52:fb:12:
51:a5:ae:80:98:1f:4d:b0:ed:f5:9e:d2:99:bb:bf:
de:09:e4:32:47:06:c8:6d:8f:fa:6f:6d:a3:db:93:
e3:1b:9b:2a:2b:a4:6d:82:cd:3c:0b:fc:06:f1:23:
39:ff:9e:77:19:70:6d:91:3f:4f:55:3c:19:65:92:
fc:14:aa:3c:6b:4e:cb:5b:d1:81:23:e2:8d:41:42:
46:22:40:b5:76:d3:39:d7:bd:aa:85:8d:56:dc:c6:
7c:69:6c:2c:cf:65:6e:48:74:48:54:67:8e:82:d8:
86:33:d5:a2:72:cf:bc:dc:62:02:65:95:69:3f:aa:
2a:4a:bb:2e:a8:c8:a8:a2:66:7b:13:78:aa:91:cb:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.240.0/23
Signature Algorithm: sha256WithRSAEncryption
78:b6:df:4a:64:ec:d1:c0:0a:dc:f4:47:73:23:2c:6f:50:0f:
4b:d1:63:b4:b3:7b:c1:51:9a:74:a6:da:97:8d:45:de:d2:05:
10:2b:2e:32:63:36:97:ab:59:e8:21:49:e6:d1:be:a3:ad:65:
b5:a0:2b:f8:29:bf:56:98:86:2b:6b:87:17:87:f3:07:86:bb:
ad:82:18:48:7c:fb:00:aa:b5:09:f5:7a:8b:63:3f:62:66:cc:
b7:be:fb:11:68:0e:89:40:27:78:b4:b4:0c:79:4a:fe:e0:16:
b5:99:0f:7f:6d:70:fc:f7:c8:19:58:be:a6:6e:8c:76:01:37:
52:d1:30:c0:40:8d:85:d8:6f:59:2f:ef:06:8e:20:97:f7:53:
c1:a6:57:1c:5f:d2:86:fc:ed:b5:ce:07:81:15:92:3b:cd:2f:
d8:15:67:2f:43:bd:2b:9d:9a:77:4e:ac:99:89:c5:54:5a:66:
5d:47:14:06:c7:a3:90:64:72:11:8e:0b:93:6d:4e:b3:76:c5:
ee:26:d9:0d:02:4e:c1:ed:52:14:11:8b:f2:3b:85:28:5f:1c:
45:7e:71:9a:b2:7e:3b:e3:62:79:45:a1:8d:95:92:7f:67:5a:
b9:56:2a:23:3b:ee:ba:e5:0f:3e:27:2a:63:87:38:75:17:f8:
a6:77:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:20 2025 by rpki-client