Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (raw, json)
Hash identifier: TCf1TKFQstuIfyxXNpah04aOnrhGC2+ow6ZufoymnvI=
Subject key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Jul 2025 22:36:02 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 155.205.0.0/16
IP: 198.51.211.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26833 (0x68d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 24 22:36:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.0.0/16
198.51.211.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ff:48:f3:53:85:63:a9:95:82:8f:50:e2:1f:49:2f:ef:32:
75:2a:ba:92:86:5f:bb:21:e1:73:11:20:3e:91:37:9a:a0:f2:
19:34:ac:ba:24:43:e7:02:36:ea:92:4e:ec:fc:1b:cd:85:22:
57:0c:cb:c7:7f:c9:62:21:ae:7a:f7:aa:5a:4d:28:8c:81:ed:
9e:1f:21:a0:28:62:47:4d:b1:3d:49:02:b0:a5:5c:2f:88:83:
0e:cd:16:6a:3e:69:01:09:3f:d1:d4:00:a0:8a:81:d9:9d:55:
5f:bf:5b:2b:4a:46:b4:88:4c:02:60:60:6f:c1:24:73:97:bf:
9b:5a:d1:83:22:31:6c:17:17:80:6b:ef:f3:17:8b:3a:54:76:
3f:f8:09:d2:35:f7:bf:3c:87:5f:b3:05:02:ff:99:39:a6:58:
ae:3a:99:c3:ab:87:12:d2:1d:6f:df:30:b3:ba:cc:40:b0:0f:
97:16:73:1e:88:6d:64:36:35:f8:75:8e:b7:a5:d3:d4:1b:cb:
33:eb:26:18:54:87:48:a2:1a:b9:90:0f:52:56:0d:b0:9d:6f:
b0:f3:56:fb:c8:4c:fd:5d:82:f9:91:fd:3a:0d:f3:98:89:d4:
0d:5c:9b:c2:98:96:d9:1f:40:a7:b7:e2:d2:40:0c:a4:64:51:
43:2a:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:13 2025 by rpki-client