Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
File: CDWHSXi6MJ7X2kZz53OdkyLyYps.cer (raw, json)
Hash identifier: HOLAChG4FfvMjIKRSrNkJGbEI1vED6r/LGuCSQrJbIU=
Subject key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 696D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Aug 2025 23:43:54 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.241.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26989 (0x696d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 2 23:43:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:15:48:6d:f5:8f:47:1b:c7:c5:a3:1b:85:
72:dd:ab:83:74:d7:bd:fb:fb:86:13:83:54:57:cb:
ef:e7:60:ba:f4:1b:78:76:60:1a:d0:6b:af:90:a3:
45:8d:5f:48:b9:72:e7:a3:44:fc:d7:1f:4d:ae:df:
8b:ac:30:38:e9:e9:3b:29:43:9a:b1:bc:c5:d1:e6:
87:24:6c:cc:4d:24:1a:ee:57:2e:e4:38:e6:23:32:
9f:85:42:b6:1c:29:d6:d0:a9:a1:fb:17:46:a1:9f:
75:62:92:39:43:7b:9a:a1:f4:a6:ec:8a:ea:2e:4d:
25:55:35:d5:a1:27:6e:8e:9e:8b:73:53:cf:25:1b:
33:00:db:3a:db:e6:f7:74:db:2f:ad:e6:a9:08:ad:
18:92:eb:5f:b1:f9:e1:ce:60:d9:21:ca:52:cc:f3:
e0:5b:90:de:ee:2e:6d:0d:61:3c:2c:90:f5:78:ab:
cd:ec:41:d3:88:12:a5:8b:54:8f:ff:7a:52:4c:8c:
37:3d:ab:b8:c7:a1:6d:ea:f3:b9:35:66:e3:11:da:
d1:a4:0d:b5:c5:af:1f:fb:84:bb:bb:df:62:ba:a6:
2d:94:cd:16:35:66:29:e9:be:5f:d4:b6:a0:c9:00:
d2:cd:c1:54:5d:a2:4b:dd:36:b8:8f:0b:e2:9e:54:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.241.0/24
Signature Algorithm: sha256WithRSAEncryption
52:81:0d:f7:83:d7:c9:48:76:4b:19:20:50:41:c9:75:58:3e:
de:1d:15:ea:09:00:61:ee:82:f0:20:ca:15:91:5d:3d:5b:91:
74:02:bf:c9:e5:05:f6:8e:e9:57:9c:39:f0:19:12:00:e8:62:
3f:ed:fa:62:af:81:2d:f5:d5:0a:96:1c:de:37:38:36:1a:3e:
4c:e4:34:c6:df:42:d4:d7:2f:33:a4:dd:f6:ea:b6:fd:48:c4:
21:53:2f:fc:56:38:a2:e9:03:4e:9e:f3:4f:a7:d7:9e:9b:f1:
3d:4f:b4:a8:13:b2:90:f1:1a:94:c7:2e:94:99:f1:c6:ae:74:
4c:08:a6:49:1e:b9:2c:ea:90:e2:b7:16:48:5a:2b:e6:56:da:
30:c3:8f:47:dc:b4:86:33:40:42:f2:db:a1:1d:2f:52:82:88:
05:c2:73:e6:1d:0e:03:b2:1d:92:78:04:91:9e:04:23:dd:fb:
a5:a2:d7:06:e6:f1:6e:cd:c1:1e:15:dc:04:1b:f0:bc:97:1a:
df:85:1c:0b:e9:6b:b6:2a:6e:1b:2b:ae:2d:03:6f:68:fe:19:
ab:0f:49:52:40:3b:b9:a2:c3:6b:fb:46:d0:0d:16:8e:ad:61:
4d:34:dc:8d:80:37:7c:ee:89:e8:5b:e6:5a:ae:b1:8a:6f:1a:
e6:4b:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:49 2025 by rpki-client