
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
File: JCq5H6fHpkrOd9m09mHijAsVuOA.cer (raw, json)
Hash identifier: 8e+oYmO5NxdIBeHtB7gT99+2GwVARwNYpXB4t3cHrbw=
Subject key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Jul 2025 12:39:58 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 160.25.4.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26872 (0x68f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 28 12:39:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:ac:ba:c3:8f:43:61:41:b7:41:5c:59:b5:
64:66:cb:a2:e3:17:5a:32:13:cc:7b:be:64:cc:bb:
91:dc:f6:d7:89:eb:f9:63:bd:13:4a:70:74:77:30:
cb:e2:90:21:93:83:a5:f1:ac:6e:a4:4d:ee:f2:94:
fa:5c:23:aa:60:1f:a6:33:55:34:77:95:ee:a7:16:
88:68:17:80:42:bd:20:15:71:30:55:d8:98:5f:cc:
97:5b:9a:36:b7:6b:3c:00:e6:d0:1d:d1:83:94:37:
88:21:7d:a3:eb:49:19:bb:60:fe:bf:12:c3:92:e8:
62:cc:d1:98:f6:71:5b:e9:1a:68:da:2b:4b:f7:f3:
34:39:63:68:ad:d8:e1:a0:df:8a:8e:28:60:49:e6:
80:eb:2a:da:90:a4:9e:8a:8a:37:59:08:90:0d:37:
75:76:77:94:37:6a:6b:d0:fd:f9:63:2e:7e:80:04:
40:24:1b:d6:2d:36:4c:d9:8e:fd:77:f4:43:ce:29:
dc:36:8c:96:09:d5:0f:62:ff:84:30:f2:b9:16:65:
73:1a:ea:67:ee:54:71:8f:e3:59:19:9e:8a:5e:08:
e7:6e:f3:4b:1f:3e:b8:8a:e2:f9:2a:87:b1:5a:fc:
00:e9:ef:25:2a:01:1d:0c:f1:86:32:a3:95:a0:a5:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.4.0/23
Signature Algorithm: sha256WithRSAEncryption
43:58:fe:3f:6e:65:77:6b:30:58:40:11:d1:79:4d:b6:9b:cf:
49:0f:54:25:b0:38:8d:f5:72:c8:96:59:11:34:a4:6b:6c:60:
4c:89:0e:7a:2f:a1:19:39:71:52:e7:04:cb:ee:5a:48:6f:35:
f5:17:f6:9d:70:7a:c5:98:8d:dc:8a:62:8c:1e:e2:a7:11:44:
83:1b:88:f6:ae:b4:23:fe:c8:6c:b7:9f:a2:af:b3:58:74:cd:
cc:3a:a9:35:a9:d9:c6:42:39:90:a0:21:c7:76:42:9a:23:af:
b6:cb:9c:66:2a:e8:3b:c8:c0:41:4f:65:8a:6c:05:f1:07:70:
6e:86:04:61:b8:7d:73:22:ae:24:25:3c:59:92:b1:9b:e1:e3:
f4:e2:e5:14:e7:7b:79:dc:a7:31:80:6a:8c:39:a4:25:e7:33:
4d:20:cc:9a:78:f4:e1:a4:e9:6e:46:0a:43:55:98:08:e3:fb:
ce:b6:f7:84:34:76:44:8d:a1:05:bb:d4:6b:d7:2c:39:e1:56:
53:b2:30:e8:89:24:8d:5e:d7:5d:c5:ef:b5:c0:7b:5d:47:76:
7e:f4:49:f7:cb:44:e5:ca:e0:3d:4f:84:89:d1:61:d4:51:a3:
45:63:da:4a:d2:7d:aa:70:02:c3:cd:10:90:28:90:61:a3:53:
47:7a:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:07 2025 by rpki-client